Hercules Open RMS Platform - Genmega

Hercules Open Platform
Genmega Configuration Guide

Please contact our support team to start the initial setup and to have them guide you through any steps you may need help with.

1-800-561-8880 - Press Option 1 for support

Setting up an ATM on the Hercules Open Platform is a five step process. 

1. Add the Terminal in the Hercules Portal. (Call DPL Support to do this step)
2. Configure the ATM to route transactions through DPL.
3. Enable RMS on the Hercules Portal.
4. Configure the ATM for RMS with DPL.
5. Validate the setup.

Step 1 -  Add the Terminal in the Hercules Portal

Call DPL Support to do this step.

Step 2 - Configure the ATM to route transactions through DPL

Note: If using a wireless device it must have public internet access!

Note: ATMs on the Open Hercules Platform must be configured for TLS/SSL transactions. Please ensure you have the correct TLS/SSL root certificate file installed on the ATM. All ATMs configured for a wired connection should already have TLS/SSL enabled and the certificate installed.

If you do not have a valid SSL/TLS certificate, follow the steps for Installation of Root Certificate Files, if you otherwise already have a valid certificate you can jump ahead to Change Communication Type step.

- Installation of Root Certificate Files (rootcert.pem)

You can get the Root Cert from the Hercules Portal under the Guides & Downloads section.
The rootcert.pem file is used to supplement the list of certificates already installed on your GenMega
ATM. The supplemental certificates are trusted chains used by payment processors that are not always
preinstalled on ATMs. These will allow validation to be enabled on the ATM for enhanced protection
against logical attacks.
A) Download the DPL rootcert.pem file and install it on a USB drive or SD card that is 2GB or less in size. It should appear as depicted below.

NOTE: The 2GB drive size is a requirement for GenMega ATMs. They can have trouble accessing drives
larger than 2GB. WARNING: This is important. If you don't have one, purchase a 2GB drive

B) Plug the USB drive (or SD card) into the appropriate port on your GenMega's control board (the
green USB drive in our example). The GenMega G2500 ports are as seen below. USB is on the
right when viewing the ATM from behind.

C) To install the new rootcert.pem, navigate to the SSL Configuration screen using the path listed below and press Load Cert. From USB.

NOTE: If you encounter an error at this stage, you either misnamed the rootcert.pem file or your USB drive or SD card is not 2GB or less and FAT formatted (see previous steps).

Once this is complete you should see an Operation Success displayed on screen.

1) Change Communication Type: From the Operator Function screen (Main Menu) choose: 

1. Customer Setup 

2. Change Processor 

• Communication: SSL Length Prefix w/o ETX
• Message Format: Standard 3
• SSL Data Format: 8 Bits
• SSL options --> SSL version 1.2 with Hostname Verification and SSL Certification ENABLED
  
  
  

3. Processor Option 

• Reversal on Host Error: Enable 

2) Configure Host IP: From the Operation Function screen (Main Menu) choose: 

1. Host Setup 

2. Host IP Address

• Host IP Address #1: tls1.dplwireless.com
• Host Port #1: (see processor port chart below)
• Host IP Address #2: tls2.dplwireless.com
• Host Port #2: (see processor port chart below)

3. Perform a Key Download to register the Terminal ID with DPL

If the key download is successful you will then see the a Serial number in the health panel in the Hercules Portal reflect the public connection.

Step 3 - Enable RMS on the Hercules Portal

1. Select the Terminal in the devices list. 

2. Select the RMS tab from the top menu navigation then select the “RMS Enabled” toggle.

3. Select Genmega Open from the ATM Type dropdown menu then select “Enable Hercules RMS”. 

4. After enabling Hercules RMS in the Hercules Portal, you'll see configuration information for programming the ATM. You will need this information when you program the ATM for Hercules RMS.

Step 4 - Configure the ATM for RMS with DPL

Note: ATMs must be configured for TLS/SSL to work!

*Hercules RMS supports the following models: E4000, 1700, 1700W, 1900, G2500, GT3000, C4000, 4000T. RMS is NOT supported with models MB1000/MB2000, MB2100, or MB1500.

• Before beginning you will need to download a SSL certificate to be used specifically for RMS.  This is different from the certificate used for transactions.  You can download the Genmega RMS Certificate from the portal here: https://docs.dplwireless.com/Genmega_RMSCert.zip.
• Unzip the file and place the rmscert.pem on the root of a USB stick.  We will be using this in one of the steps below.
• Enter the OPERATOR FUNCTION (main Menu) section on the Genmega Terminal.
• Select HOST SETUP to navigate to the RMS Section.
• Select REMOTE MONITOR.
• Select RMS RECEIVE EN/DISABLE to enable RMS RECEIVE.

• Select  RMS HOST  then set the IP and Port by selecting RMS SEND HOST IP and RMS RECEIVE PORT. Use the RMS Host (SSL) and RMS Host Port (SSL) displayed in the Hercules portal. 

• Place the USB key with the rmscert.pem file on it in the ATM and click LOAD CERT. FROM USB. This will load the certificate specific for Genmega RMS.  After it is loaded you can remove the USB key.
• Select RMS SSL VERIFY CERT. to enable SSL verification.
• Please ensure the ports and IPs match the screen above.  Genmega may have a spelling discrepancy depending on what firmware you are on in the RMS SSL HOST PORT button.
• Select CANCEL to return to the REMOTE MONITOR menu. Select CHANGE RMS PASSWORD and enter the RMS Password provided in the Hercules Portal as described in Step 6 of the Hercules Portal Configuration section above.

Note: Every terminal will have a unique password.

• Return to the REMOTE MONITOR menu and select RMS RECEIVE PORT. It should be set to the default of 18456. If it is not, set it to 18456.
  
  
• Return to the Remote monitor screen and select ENTER to perform a test call.

When the test succeeds you will see a “TEST SUCCESS!! “ message on the bottom of the screen. The ATM is now registered with Hercules RMS and you can return to the Hercules Portal.

On the Hercules portal you will then see that it is waiting for Password validation.  Perform another Test Call to finish password validation. Return to the Welcome screen of the ATM and wait approx. 1-2 minutes while the ATM verifies the RMS password. You should see RMS in progress in your screen come and go about 2-3 times.

Step 5 - Validate the setup

       Hercules RMS Configuration Status Check in the Hercules Portal

1. Return to the RMS Configuration section of the Hercules Portal and confirm that the Hercules RMS status is stating RMS Good, indicating a successful configuration.
2. Test one of the RMS features to ensure everything is working.