3.The secure certificate file is used to validate the signature of code files and data files as soon as they are installed. The secure certificate can also be accessed as needed throughout the download procedure.
4.If the download is successful, the secure certificate file will be erased from a temporary location and updated into SSA’s memory.
10.4Secure Certificate
The secure certificate is a text file that contains security information for a download package.
Once the text file is constructed, it must be passed through a securing utility which generates the MAC of the certificate. The utility will also generate MACs for all of the software components described in the certificate.
The secure certificate contains all the security information necessary for SSA to determine if the downloaded application is eligible to upgrade.
The secure certificate is also a descriptor of all the software components that are necessary to make up a download session. In effect, the secure certificate represents an application descriptor file that contains secured fingerprints for each of the software components representing the application.
The following is an example of a secure certificate text file.
MAC=12345678
[VisaPEDMode]
1
[Appl]
MAC=12345678 applname dstfilename.ext authmethod encrypt srcfilename.ext
[SecFiles]
MAC=12345678 applname dstfilename.ext class authmethod encrypt existence srcfilename.ext
MAC=12345678 applname dstfilename.ext class authmethod encrypt existence srcfilename.ext
[NonSecFiles]
applname filename.ext class existence applname filename.ext class existence
[DeleteAppl]
applname codefilename1 applname codefilename2
[DeleteFiles]
applname filename.ext class applname filename.ext class
[DeleteWholeApp] applname
Ingenico 6500 User’s Guide | 101 |
