ATM Security Update: How To Enable TLS 1.2 Protocol

The Announcement

The PCI Security Standards Council has mandated that the use of SSL and Early TLS (i.e. TLS 1.0) protocols be discontinued effective June 26, 2018. All network providers and processors are making preparations to ensure they are compliant by the June 26, 2018 deadline. To prevent any downtime, make sure your ATM terminals have been updated with the latest software and security certificates. NOTE: This does not include TLS 1.1 or higher.

After this date, ALL ATMs using SSL or Early TLS (i.e. TLS 1.0) communications protocol will stop communicating to the Host and fail to process any transactions.

What Does This Mean?

  • Network providers are already handling the TLS 1.2 communications protocol. Therefore, as soon as possible, set the communication protocol on your ATMs to use TLS 1.2 communication protocol.
  • Anytime you visit a direct connect TCP/IP communicating ATM verify that TLS 1.2 is set.

In order to continue processing transactions …

  • TLS 1.2 Protocol MUST be enabled on your ATM Machine

Do I Need to Enable TLS 1.2?

You NEED to Enable TLS 1.2 if …

  • Your ATM is communicating via Hardwired Internet connection (TCP/IP)

You DO NOT need to Enable TLS 1.2 if …

  • Your ATM uses a phone line or wireless modem. Your machine will not be impacted if it is communicating via a phone line or cellular wireless device box already on TLS 1.2.
    • How do I know if my wireless box is TLS 1.2?

      • The chances of you having a wireless box that is not already on TLS 1.2 are low. If you are having trouble with your wireless device please call ATMDepot.com at 888.959.2269, or your Wireless Provider, with your device’s serial number. It is best to make the request while at the location where the device is in service. Our wireless department can update your device remotely.

Do I Have TLS 1.2?

If you are using software higher than the one listed below, your ATMs should function normally after April 30, 2018. It is still good practice to confirm TLS 1.2 is enabled on each of your machines.

Hyosung

– WinCE 5.0: AP V01.04.19
– WinCE 6.0: AP V6.01.13

Genmega/Hantle/Tranax

– V05.00.19

How to Enable TLS 1.2 Protocol

Hyosung

Customer Setup > Select Processor > TCP/IP Type

  1. SLS/TLS = Enable
  2. SLS/TLS Version = Up to TLS v1.2

Genmega/Hantle/Tranax

Customer Setup > Change Processor > SSL Pass Through > SSL > SSL Version = TLS 1.2


If you do not see these options, please check that you have the required software version that supports TLS 1.2 protocol for each manufacturer.

Recommendations

  • Keep Your Software Up-to-Date

    Keep your ATMs updated with the latest software to be compliant. Listed below are the latest software versions:

    Hyosung

    – WinCE 5.0:  V01.04.31
    – WinCE 6.0:  V06.01.31

    Genmega/Hantle/Tranax

    – V05.00.31a

  • Confirm EMV Enabled

    While you are updating the software on your terminal, it is important to also check that EMV is Enabled.

    The MasterCard EMV Liability Shift occurred on Friday, October 21, 2016. ATM owners are liable for fraudulent MasterCard transactions if machines are not EMV compliant.

    Hyosung

    Operator Functions > Customer Setup > Optional Function 1 > EMV > Enable

    Genmega/Hantle/Tranax

    Operator Functions > Customer Setup > Option Function > EMV – Enable

How to Enable TLS 1.2 – Infographic

How to Enable TLS 1.2

[VIDEO] Explosives Used to Break into Machine during ATM Robbery, Thieves Caught on HD Camera

On August 11, 2017, two criminals drove their SUV up to a Gas Station ATM Kiosk with a plan. They planned to execute an ATM robbery by blowing up the ATM with some sort of liquid explosive. It is clear from this video, it’s not the first time they are attempting this. They are wanted by the FBI. The authorities were very excited to see the quality of our security footage.

Authorities_On_Scene

Authorities at the Crime Scene of the ATM Robbery in San Diego, CA

When you start using explosives on an ATM, you attract a lot of attention. You get the local police, sheriffs, SWAT, the Bomb Squad, ATF, and the FBI involved. That’s a lot of manpower hunting you down.

These guys are wanted by the FBI. It’s not just a local crime.  Is a few grand worth having to hide and run for the rest of your life? I don’t think so.

The suspects think they got away with it. However, as time will tell, and with the help of this HD video, and the enhancement tools Federal Law Enforcement agencies have available, they will most likely do time behind bars for this ATM robbery.  Maybe they will save all the money they stole to pay for their lawyer. They will need it.

I’ve been in the ATM business since 1994. Since then, I’ve helped hundreds of Independent ATM Deployers (IAD’s) start, run, and maintain successful ATM businesses. I’ve personally sold or installed hundreds and hundreds of ATM machines. I currently manage thousands of machines and hundreds of thousands of ATM transactions nationwide and I’ve never, ever seen anything like this.

This location has been a customer of ours for over a decade. We’ve never had any issue until we installed a new kiosk.  While this small kiosk does not appear to be bomb proof, the old kiosk building we used previously onsite was. Unfortunately for us the gas station – car wash is undergoing a remodel and needed to demolish the building, so we had to move the ATM to the other side of the parking lot.

In order not to inhibit the authority’s investigation, we won’t go into the details of what the authorities knew in this article.

However, now that we know all the details we can help others.

So, if you plan to install a kiosk and you are one of our customers (or want to be), please contact our office for some additional help.

We learned an expensive lesson, so we hope to use it to educate our customers.

ATM Depot can certainly help you avoid the same fate. We thought we prepared for every security scenario but they proved us wrong on this one. The key is that we learned an awful lot from this and can now assist our customers even better when dealing with outdoor ATMs.

**** UPDATE ****

September 28, 2017

After many calls between the account manager, Jeremy, and the FBI and ATF, on this situation, we learned that the authorities were able to issue a subpoena at the home of Scott Michael Petri. We are not sure how all this went down but we speculate that the FBI was able to leverage the information obtained in the video of the ATM robbery. According to law enforcement, one of the suspects bragged to a confidential informant about the crime. Upon serving a subpoena at the suspects home, the Law enforcement authorities say they found a drill, a gas cylinder, clothing and other incriminating evidence in his home that matched the items in the surveillance video during the crime.

Court documents allege (and video shows) Petri used a cordless drill to make two holes in the ATM machine’s housing. A second unidentified suspect (now in custody) approached the ATM with an open flame (see video, looks like a cigarette) and lit a fuse.  The suspects drove to the other side of the gas station and the ATM exploded. See the entire ATM robbery (edited for time) in the video above.

Suspect_Searching

The suspect (circled) is searching for the cash box after the ATM robbery explosion

The August robbery was the second time this year an explosive device was used on an ATM in San Diego, according to the FBI.

**** UPDATE ****

October 5, 2017

Scott Michael Petri faces a charge of using an explosive to damage property relating to a robbery at the Chevron Station and Pit Stop Car Wash on Miramar Road just south of the 15 Freeway entrance. The suspect was picked up and booked on October 5th and transferred into Federal custody and is being held in the Federal Prison in Downtown San Diego by the ATF. Bail has been set at $250,000.

ATM_Suspect_Arrested

Public arrest records for Scott Michael Petri. One of the suspects in the ATM robbery.

Chose the Right ATM Processing

Chose the Right ATM ProcessingThere are many ways to get an ATM machine. You can purchase one from a reputable ATM company, buy a used one off eBay, get one online, etc.

Read more

How to Load an ATM Machine

How to Load an ATM Machine

Some of the most frequent questions about the ATM Machine business is How do you load an ATM Machine with Cash and the follow up question is how much does it hold.

The answer to how much cash does an ATM Machine hold really depends on the type of ATM Machine and the type of Cash Cassette. There are fixed cassette ATM machines (meaning non-removable) these are typically in lower end ATM machines designed for low volume locations (can also be upgraded when ordering). Then there are removable cassettes ATM Machines in all sorts of configurations from small Triton TDM (see video below) to the Mini Mech and the SDD or multi cassette machines for multiple denominations.

In retail locations you mostly see the TDM or the Talaris dispensers (formerly De La Rue SDD or De La Rue MiniMech). All of these are easy to load but have different capacities as well as longevity based on use (volume of transactions). Most retail based ATM Machines only have a few hundred to a few thousand dollars and are loaded and unloaded daily to reduce the temptation of ATM theft  from stupid criminals.

See how easy it is to own and operate an ATM Machine. Watch this Video to find out how to load cash in a Triton ATM Machine with a TDM dispenser.

Have Questions?  Call our toll free number at 888-50-5246 or contact us today.

Income Opportunity in ATM Machine Business

Income OpportunityLooking to make some residual income? Want to start an income opportunity and know some retail locations that could benefit from having an ATM Machine inside the store or restaurant?

Read more