Xstore Install
Xstore Install
Installation Guide
Release 13.0
May 2008
Oracle Retail Point-of-Service Installation Guide, Release 13.0
The Programs (which include both the software and documentation) contain proprietary information; they
are provided under a license agreement containing restrictions on use and disclosure and are also protected
by copyright, patent, and other intellectual and industrial property laws. Reverse engineering, disassembly,
or decompilation of the Programs, except to the extent required to obtain interoperability with other
independently created software or as specified by law, is prohibited.
The information contained in this document is subject to change without notice. If you find any problems in
the documentation, please report them to us in writing. This document is not warranted to be error-free.
Except as may be expressly permitted in your license agreement for these Programs, no part of these
Programs may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any
purpose.
If the Programs are delivered to the United States Government or anyone licensing or using the Programs on
behalf of the United States Government, the following notice is applicable:
U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data
delivered to U.S. Government customers are "commercial computer software" or "commercial technical data"
pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As
such, use, duplication, disclosure, modification, and adaptation of the Programs, including documentation
and technical data, shall be subject to the licensing restrictions set forth in the applicable Oracle license
agreement, and, to the extent applicable, the additional rights set forth in FAR 52.227-19, Commercial
Computer Software--Restricted Rights (June 1987). Oracle USA, Inc., 500 Oracle Parkway, Redwood City, CA
94065.
The Programs are not intended for use in any nuclear, aviation, mass transit, medical, or other inherently
dangerous applications. It shall be the licensee's responsibility to take all appropriate fail-safe, backup,
redundancy and other measures to ensure the safe use of such applications if the Programs are used for such
purposes, and we disclaim liability for any damages caused by such use of the Programs.
Oracle, JD Edwards, PeopleSoft, and Siebel are registered trademarks of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective owners.
The Programs may provide links to Web sites and access to content, products, and services from third
parties. Oracle is not responsible for the availability of, or any content provided on, third-party Web sites.
You bear all risks associated with the use of such content. If you choose to purchase any products or services
from a third party, the relationship is directly between you and the third party. Oracle is not responsible for:
(a) the quality of third-party products or services; or (b) fulfilling any of the terms of the agreement with the
third party, including delivery of products or services and warranty obligations related to purchased
products or services. Oracle is not responsible for any loss or damage of any sort that you may incur from
dealing with any third party.
Value-Added Reseller (VAR) Language
(i) the software component known as ACUMATE developed and licensed by Lucent Technologies Inc. of
Murray Hill, New Jersey, to Oracle and imbedded in the Oracle Retail Predictive Application Server -
Enterprise Engine, Oracle Retail Category Management, Oracle Retail Item Planning, Oracle Retail
Merchandise Financial Planning, Oracle Retail Advanced Inventory Planning and Oracle Retail Demand
Forecasting applications.
(ii) the MicroStrategy Components developed and licensed by MicroStrategy Services Corporation
(MicroStrategy) of McLean, Virginia to Oracle and imbedded in the MicroStrategy for Oracle Retail Data
Warehouse and MicroStrategy for Oracle Retail Planning & Optimization applications.
(iii) the SeeBeyond component developed and licensed by Sun MicroSystems, Inc. (Sun) of Santa Clara,
California, to Oracle and imbedded in the Oracle Retail Integration Bus application.
(iv) the Wavelink component developed and licensed by Wavelink Corporation (Wavelink) of Kirkland,
Washington, to Oracle and imbedded in Oracle Retail Store Inventory Management.
(v) the software component known as Crystal Enterprise Professional and/or Crystal Reports Professional
licensed by Business Objects Software Limited ("Business Objects") and imbedded in Oracle Retail Store
Inventory Management.
(vi) the software component known as Access Via™ licensed by Access Via of Seattle, Washington, and
imbedded in Oracle Retail Signs and Oracle Retail Labels and Tags.
(vii) the software component known as Adobe Flex™ licensed by Adobe Systems Incorporated of San Jose,
California, and imbedded in Oracle Retail Promotion Planning & Optimization application.
(viii) the software component known as Style Report™ developed and licensed by InetSoft Technology
Corp. of Piscataway, New Jersey, to Oracle and imbedded in the Oracle Retail Value Chain Collaboration
application.
(ix) the software component known as WebLogic™ developed and licensed by BEA Systems, Inc. of San
Jose, California, to Oracle and imbedded in the Oracle Retail Value Chain Collaboration application.
(x) the software component known as DataBeacon™ developed and licensed by Cognos Incorporated of
Ottawa, Ontario, Canada, to Oracle and imbedded in the Oracle Retail Value Chain Collaboration
application.
Contents
Figures
List of Tables
1 Pre-Installation Tasks
Check Supported Software..................................................................................................................... 1-1
Supported Software for Clients (Registers).................................................................................... 1-1
Supported Hardware and Software for Store Servers .................................................................. 1-2
Check Supported Hardware................................................................................................................... 1-2
Minimum Hardware Requirements ................................................................................................ 1-2
Peripheral Devices for Clients.......................................................................................................... 1-3
Supported Hardware for Clients ..................................................................................................... 1-3
Check Java KeyStore Requirement....................................................................................................... 1-3
ISD Authorization Transaction Testing ............................................................................................... 1-4
Visa Payment Application Best Practices ............................................................................................ 1-5
v
Creating with Oracle Retail Back Office ...................................................................................... 2-13
Creating without Oracle Retail Back Office ................................................................................ 2-13
Enabling Access for the Data Source Connection User ............................................................. 2-13
Securing Communication .................................................................................................................... 2-14
Configuring for Offline Data Updates.............................................................................................. 2-14
Setting up the Server to use ISD for Tender Authorization ......................................................... 2-14
Results of a Point-of-Service Installation ......................................................................................... 2-15
Running Point-of-Service .................................................................................................................... 2-15
Creating a Custom Installation........................................................................................................... 2-16
vi
Prerequisites.............................................................................................................................................. 5-1
Setting up the KeyStore..................................................................................................................... 5-2
Creating a Self-signed Digital Certificate for Testing....................................................................... 5-2
Configuring the IBM DB2 Server ......................................................................................................... 5-3
Exporting a Certificate from iKeyman ................................................................................................. 5-4
Importing the Server Certificate on the Client................................................................................... 5-5
Configuring the Client ............................................................................................................................ 5-5
Configuring the IBM FIPS-compliant Provider for SSL (optional) ............................................... 5-6
Specific Instructions for Point-of-Service ........................................................................................... 5-7
Useful Links .............................................................................................................................................. 5-7
6 Secure RMI
vii
Enforcing Password Policies Using a Verification Script............................................................ H-2
Special Security Options for IBM DB2 Databases ........................................................................... H-3
viii
List of Figures
A–1 Introduction ................................................................................................................................ A-1
A–2 Previous POS Install .................................................................................................................. A-2
A–3 License Agreement .................................................................................................................... A-2
A–4 Tier Type ..................................................................................................................................... A-3
A–5 Installation Location .................................................................................................................. A-3
A–6 Default Locale............................................................................................................................. A-4
A–7 Supported Locales...................................................................................................................... A-5
A–8 Store Server Details.................................................................................................................... A-6
A–9 Store ID ........................................................................................................................................ A-7
A–10 JRE Location................................................................................................................................ A-7
A–11 JRE Vendor.................................................................................................................................. A-8
A–12 Application Server Type ........................................................................................................... A-9
A–13 Websphere Application Server: Third Party Jars ................................................................ A-10
A–14 Database Type .......................................................................................................................... A-11
A–15 Database Configuration for Oracle 10g ................................................................................ A-12
A–16 Database Configuration for DB2............................................................................................ A-13
A–17 Database Owner Details.......................................................................................................... A-15
A–18 Store Database Server Details ................................................................................................ A-16
A–19 Transaction Retrieval Location .............................................................................................. A-16
A–20 Scratchpad Database Information ......................................................................................... A-17
A–21 POS Administrator User ......................................................................................................... A-19
A–22 ORSIM Integration................................................................................................................... A-20
A–23 Enter ORSIM Webservice URL .............................................................................................. A-20
A–24 Server Journal Options ............................................................................................................ A-21
A–25 Logging Export Options ......................................................................................................... A-22
A–26 Logging Detail Options........................................................................................................... A-23
A–27 RTLog Export Options ............................................................................................................ A-23
A–28 Security Setup: KeyStore Settings ......................................................................................... A-24
A–29 Security Setup: KeyStore JAR Files ...................................................................................... A-25
A–30 Central Office Server Information ......................................................................................... A-26
A–31 Back Office Server Information.............................................................................................. A-27
A–32 Tender Authorization.............................................................................................................. A-29
A–33 Tender Authorization Parameters......................................................................................... A-30
A–34 Value-Added Tax (VAT)......................................................................................................... A-31
A–35 Installation Progress ................................................................................................................ A-31
A–36 Install Complete ....................................................................................................................... A-32
B–1 Introduction ................................................................................................................................ B-1
B–2 Previous POS Install .................................................................................................................. B-2
B–3 License Agreement .................................................................................................................... B-2
B–4 Tier Type ..................................................................................................................................... B-3
B–5 Installation Location .................................................................................................................. B-3
B–6 Default Locale............................................................................................................................. B-4
B–7 Supported Locales...................................................................................................................... B-5
B–8 Store Server Details.................................................................................................................... B-6
B–9 Store ID ........................................................................................................................................ B-7
B–10 JRE Location................................................................................................................................ B-7
B–11 JRE Vendor.................................................................................................................................. B-8
B–12 Application Server Type ........................................................................................................... B-9
B–13 Websphere Application Server: Third Party Jars ................................................................ B-10
B–14 Derby Jars.................................................................................................................................. B-11
B–15 Transaction Retrieval Location .............................................................................................. B-12
B–16 ORSIM Integration................................................................................................................... B-13
B–17 Logging Detail Options........................................................................................................... B-13
B–18 Register Number ...................................................................................................................... B-14
ix
B–19 Security Setup: KeyStore Settings ......................................................................................... B-15
B–20 Security Setup: KeyStore JAR Files ...................................................................................... B-16
B–21 Installation Profile.................................................................................................................... B-17
B–22 POS Platform Components..................................................................................................... B-18
B–23 POS Devices .............................................................................................................................. B-18
B–24 POS Printer Support ................................................................................................................ B-19
B–25 Epson Third-Party Jars ............................................................................................................ B-20
B–26 EJournal Options...................................................................................................................... B-21
B–27 JMS Queue Journal Support ................................................................................................... B-22
B–28 Parameter Distribution Information ..................................................................................... B-22
B–29 Back Office Server Information.............................................................................................. B-23
B–30 Tender Authorization.............................................................................................................. B-25
B–31 Tender Authorization Parameters......................................................................................... B-26
B–32 Value-Added Tax (VAT)......................................................................................................... B-27
B–33 User Interface Type.................................................................................................................. B-27
B–34 Installation Progress ................................................................................................................ B-28
B–35 Install Complete ....................................................................................................................... B-28
x
List of Tables
1–1 Client Software Requirements ................................................................................................. 1-1
1–2 Store Server Hardware and Software Requirements............................................................ 1-2
1–3 Minimum Hardware Requirements........................................................................................ 1-2
1–4 Client Hardware Requirements............................................................................................... 1-3
1–5 ISD Authorization Transaction Set Tested ............................................................................. 1-4
2–1 Server Tier Logical Components ............................................................................................. 2-3
2–2 Database Configuration Settings ............................................................................................. 2-3
2–3 <POS_install_directory> Subdirectories.............................................................................. 2-15
2–4 <POS_install_directory>\pos Subdirectories..................................................................... 2-15
4–1 Server Tier Logical Components ............................................................................................. 4-3
4–2 Database Configuration Settings ............................................................................................. 4-3
4–3 <POS_install_directory> Subdirectories............................................................................... 4-15
4–4 <POS_install_directory>/pos Subdirectories...................................................................... 4-16
xi
xii
Preface
Oracle Retail Installation Guides contain the requirements and procedures that are
necessary for the retailer to install Oracle Retail products.
Audience
This Installation Guide is written for the following audiences:
■ Database Administrators (DBA)
■ System analysts and designers
■ Integrators and implementation staff
Related Documents
For more information, see the following documents in the Oracle Retail
Point-of-Service documentation set or Oracle Retail Strategic Store Solutions
documentation set:
■ Oracle Retail Point-of-Service Release Notes
■ Oracle Retail Point-of-Service Operations Guide
■ Oracle Retail Point-of-Service User Guide
■ Oracle Retail Strategic Store Solutions Security Implementation Guide
Customer Support
https://metalink.oracle.com
When contacting Customer Support, please provide:
■ Product version and program/module name
■ Functional and technical description of the problem (include business impact)
■ Detailed step-by-step instructions to recreate
■ Exact error message received
■ Screen shots of each step you take
xiii
Review Patch Documentation
For a base release (".0" release, such as 13.0), Oracle Retail strongly recommends that
you read all patch documentation before you begin installation procedures. Patch
documentation can contain critical information related to the base release, based on
new information and code changes that have been made since the base release.
Conventions
The following text conventions are used in this document:
Convention Meaning
boldface Boldface type indicates graphical user interface elements associated
with an action, or terms defined in text or the glossary.
italic Italic type indicates book titles, emphasis, or placeholder variables for
which you supply particular values.
monospace Monospace type indicates commands within a paragraph, URLs, code
in examples, text that appears on the screen, or text that you enter.
xiv
1
Pre-Installation Tasks
This chapter defines supported products for client and server systems in the Oracle
Retail Point-of-Service system.
Note: The Oracle stack and IBM stack are the configurations that
were tested for this release. The components required for each stack
are listed in this chapter. For each component, the product and the
version that were used for testing are included. While Point-of-Service
may work in other configurations, these are the configurations that are
supported for this release.
If you use the simulated key management package bundled with Oracle Retail
Point-of-Service, the simkeystore.jar file must be saved after it is extracted from
the Point-of-Service distribution. Information on saving the file is included in
Chapter 2 and Chapter 4.
Table 1–5 shows the transaction types and messages that were tested.
This chapter provides information about the installation procedures for Oracle Retail
Point-of-Service on the Oracle Stack using Windows.
Oracle Retail provides an installer for Point-of-Service, but customer installations
typically develop custom procedures. Note that the installer is not appropriate for all
installations. Oracle Retail expects implementation teams to develop custom
procedures for actual register installations, which may or may not be based on the
installer described here. For guidelines, see "Creating a Custom Installation".
Create the Database Schema Owner and Data Source Connection Users
A user to own the database schema and a data source connection user used by
Point-of-Service to access the database must be defined. Specific roles must be defined
for each user. The installer asks you to enter the user name and password for both
these users.
The installer grants the data source connection user access to the application database
objects.
Installing Point-of-Service
To establish an initial Oracle Retail Point-of-Service installation or to create a
demonstration system, use the Point-of-Service installer as described in this section.
When you run the installer, it asks you to specify a Tier Type. The following types are
available:
■ N-Tier Client—Choose this when installing the client component.
■ N-Tier Store Server—Choose this when installing the store server component.
Run the installer one time for each machine in the Server Tier and once for each
register.
The installer performs the following steps. Not all steps apply to client and server
installations.
■ Installs Foundation, Retail Domain, and Oracle Retail Point-of-Service jar files.
■ Installs database build scripts and start-up files.
■ Defines Server Tier in the conduit script that starts Point-of-Service for the given
machine.
■ Defines hostnames or IP addresses and port numbers for the Store Server and
database server.
■ Defines device availability.
■ Defines application properties for Store ID and Register Number.
<creation
factoryClass="com.extendyourstore.jpos.CrsJposServiceInstanceFactory"
serviceClass="com.extendyourstore.jpos.Scanner.Simple3"/>
<vendor name="360Commerce" url="http://www.360commerce.com"/>
<jpos category="Scanner" version="1.5"/>
<product description="360Commerce Serial Scanner"/>
</JposEntry>
2. To configure the Ingenico device for signature capture, replace the existing entry
or add the following entry to the jpos.xml file. Change
<pos_install_directory>, shown in bold in the following example, to your
installation directory for Point-of-Service:
<JposEntry logicalName="defaultSignatureCapture">
<creation factoryClass="services.IngenicoServiceInstanceFactory"
serviceClass="services.et1k.sigcap.SignatureCaptureService"/>
<vendor name="Ingenico" url="http://www.ingenico-us.com"/>
<jpos category="SignatureCapture" version="1.5.2"/>
<product description="ET1K POS Signature Capture JavaPOS Service
from Ingenico, Inc."
name="Ingenico ET1K Signature Capture Service for JavaPOS(TM)
Standard"
url="http://www.ingenico-us.com"/>
<!--Other non JavaPOS required property (mostly vendor properties
and bus specific properties i.e. RS232 )-->
<prop name="stopBits" value="1"/>
<prop name="portName" value="COM1"/>
<prop name="dataBits" value="8"/>
<prop name="timeOut" value="5000"/>
<prop name="baudRate" value="9600"/>
<prop name="parity" value="0"/>
<prop name="TestForm" value="sigtest.icf"/>
<prop name="SigCompression" value="2byte"/>
<prop name="ConfigPath" value=
"<pos_install_directory>/pos/config/device/ingenico/"/>
<prop name="debug" value="ON"/>
</JposEntry>
3. To configure the Ingenico device for the screens used within the Point-of-Service
application, replace the existing entry or add the following entry to the jpos.xml
file. Change <pos_install_directory>, shown in bold in the following
example, to your installation directory for Point-of-Service:
<JposEntry logicalName="defaultForm">
<creation factoryClass="services.IngenicoServiceInstanceFactory"
serviceClass="services.et1k.form.FormService"/>
<vendor name="Ingenico" url="http://www.ingenico-us.com"/>
<jpos category="Form" version="1.5.2"/>
<product description="ET1K POS Form JavaPOS Service from Ingenico,
Inc."
name="Ingenico ET1K Form Service for JavaPOS(TM) Standard"
url="http://www.ingenico-us.com"/>
<!--Other non JavaPOS required property (mostly vendor properties
and bus specific properties i.e. RS232 )-->
<prop name="stopBits" value="1"/>
<prop name="portName" value="COM1"/>
<prop name="dataBits" value="8"/>
<prop name="baudRate" value="9600"/>
<prop name="parity" value="0"/>
<prop name="timeOut" value="5000"/>
<prop name="clear" value="clear.icf"/>
<prop name="ItemsForm" value="scrollingtext.icf"/>
<prop name="SigCapForm" value="sigtest.icf"/>
<prop name="ScrollingText" value="scrollingtext.icf"/>
<prop name="Graphic" value="scan.icf"/>
<prop name="Survey" value="type.icf"/>
<prop name="Scripts" value="sigtest.icf"/>
<prop name="Logo" value="360logo.icf"/>
<prop name="SigCompression" value="2byte"/>
<prop name="TwoButtons" value="2buttons.icf"/>
<prop name="ThreeButtons" value="3buttons.icf"/>
<prop name="FourButtons" value="4buttons.icf"/>
<prop name="ConfigPath" value=
"<pos_install_directory>/pos/config/device/ingenico/"/>
</JposEntry>
4. To configure the Ingenico PIN pad, replace the existing entry or add the following
entry to the jpos.xml file:
<JposEntry logicalName="defaultPINPad">
<creation factoryClass="services.IngenicoServiceInstanceFactory"
serviceClass="services.et1k.pinpad.PINPadService"/>
<vendor name="Ingenico" url="http://www.ingenico-us.com"/>
<jpos category="SignatureCapture" version="1.5.2"/>
</JposEntry>
5. To configure the Ingenico MSR device, replace the existing entry or add the
following entry to the jpos.xml file:
<JposEntry logicalName="ingenicoMSR">
<creation factoryClass="services.IngenicoServiceInstanceFactory"
serviceClass="services.et1k.msr.MSRService"/>
</JposEntry>
6. To configure the default printer, replace the existing entry or add the following
entry to the jpos.xml file:
<JposEntry logicalName="defaultPrinter">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"/>
serviceClass="com.ibm.jpos.services.SdiIBM4610EPOSPrinter"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="POSPrinter" version="1.9.3"/>
<product description="IBM JavaPOS(TM) POSPrinter RS485 Service for IBM
4610 TI2/3/4/5/8/9 TM/F 6/7 Printer" name="IBM JavaPOS for Linux/Windows
Version 1.9.3" url="http://www.pc.ibm.com/store/"/>
7. To configure the default MICR device, replace the existing entry or add the
following entry to the jpos.xml file:
<JposEntry logicalName="defaultMICR">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"
serviceClass="com.ibm.jpos.services.IBM4610MICR"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="MICR" version="1.9.3"/>
<product description="IBM JavaPOS(TM) MICR RS485 Service for IBM 4610
TI2/4/8/9 Printer" name="IBM JavaPOS for Linux/Windows Version 1.9.3"
url="http://www.pc.ibm.com/store/"/>
8. To configure the default keyboard, replace the existing entry or add the following
entry to the jpos.xml file:
<JposEntry logicalName="defaultPOSKeyboard">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"
serviceClass="com.ibm.jpos.services.IBMPOSKeyboard"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="POSKeyboard" version="1.9.3"/>
<product description="IBM JavaPOS(TM) POSKeyboard PS2 Service for IBM
4820/ANKPOS/CANPOS/NANPOS/SureONE Keyboards" name="IBM JavaPOS for
Linux/Windows Version 1.9.3" url="http://www.pc.ibm.com/store/"/>
9. To configure the default MSR, replace the existing entry or add the following entry
to the jpos.xml file:
<JposEntry logicalName="defaultMSR">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"name="Ingenic
o ET1K Form Service for JavaPOS(TM) Standard"
url="http://www.ingenico-us
serviceClass="com.ibm.jpos.services.IBMMSR"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="MSR" version="1.9.3"/>
<product description="IBM JavaPOS(TM) MSR PS2 Service for IBM
ANKPOS/NANPOS/CANPOS/SureONE Keyboards" name="IBM JavaPOS for Linux/Windows
Version 1.9.3" url="http://www.pc.ibm.com/store/"/>
10. To configure the default cash drawer, replace the existing entry or add the
following entry to the jpos.xml file:
<JposEntry logicalName="defaultCashDrawer">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"
serviceClass="com.ibm.jpos.services.IBMCashDrawer"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="CashDrawer" version="1.9.3"/>
<product description="IBM JavaPOS(TM) CashDrawer Service for IBM
SurePOS 300/72x/74x/78x-A" name="IBM JavaPOS for Linux/Windows Version 1.9.3"
url="http://www.pc.ibm.com/store/"/>
11. To configure the default line display, replace the existing entry or add the
following entry to the jpos.xml file:
<JposEntry logicalName="defaultLineDisplay">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"
serviceClass="com.ibm.jpos.services.LineDisplayLCVFD"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="LineDisplay" version="1.9.3"/>
<product description="IBM JavaPOS(TM) LineDisplay USB Service for IBM
Vaccum Fluorescent Display (VFD)-A" name="IBM JavaPOS for Linux/Windows Version
1.9.3" url="http://www.pc.ibm.com/store/"/>
3. Run the install.cmd script. This will launch the installer. After installation is
complete, a detailed installation log file is created at
<POS_install_directory>\pos\logs\installer_log.txt
Note: The usage details for install.cmd are shown below. The typical
usage for GUI mode does not use arguments.
install.cmd [text | silent oracle]
4. Run one of the available dbbuild.bat targets to create the database schema, load
data, and load the procedures for purging aged data in the database. For
information on the purge procedures, see the Oracle Retail Point-of-Service
Operations Guide.
■ seed_data: loads seed data
■ load_purge_procedures: loads database purge procedures
For example, dbbuild seed_data
5. If Central or Central, Local Failover was selected for the Transaction Retrieval
Location, run scratchpad.bat to create the Scratchpad database.
Securing Communication
After running the installer, communication with the database and communication
between the store server and registers must be secured.
■ For information on securing the JDBC, see Chapter 3.
■ For information on enabling secure RMI between the store server and registers, see
Chapter 6.
Running Point-of-Service
You run the Oracle Retail Point-of-Service system by executing batch files or shell
scripts, found in your installation’s bin directory, to launch various components.
To run Point-of-Service:
1. Start the store server:
StoreServerConduit.bat
When the message TierManager Started appears, the server has started. The server
component does not have a user interface.
This chapter has information on setting up and communicating with a secured Oracle
10g R2 database server based on the following assumptions:
■ Client authentication is not needed.
■ The Oracle wallet is used as a trust store on the database server.
SSL encryption for Oracle JDBC has been supported in the JDBC-OCI driver since
Oracle JDBC 9.2.x, and is supported in the THIN driver starting in 10.2. SSL
authentication has been supported in the JDBC-OCI driver since Oracle JDBC 9.2.x,
but is not yet supported in the THIN driver.
For more information, see the following websites:
■ http://download-uk.oracle.com/docs/cd/B19306_
01/network.102/b14268/asossl.htm#i1013323
■ http://download.oracle.com/docs/cd/B19306_
01/network.102/b14268.pdf
■ http://download-uk.oracle.com/docs/cd/B19306_
01/java.102/b14355/sslthin.htm#CHDFEICG
■ http://www.oracle.com/technology/tech/java/sqlj_
jdbc/pdf/wp-oracle-jdbc_thin_ssl_2007.pdf
■ http://download.oracle.com/docs/cd/B31017_
01/web.1013/b28957/configssl.htm#CHDHGCDJ
listener.ora
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = /u01/oracle/10g)
(PROGRAM = extproc)
)
)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = 10.143.44.108)(PORT = 1521))
(ADDRESS = (PROTOCOL = TCPS)(HOST = 10.143.44.108)(PORT = 2484))
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROCO))
)
)
WALLET_LOCATION=(SOURCE=(METHOD=FILE)
(METHOD_DATA=(DIRECTORY=/u01/oracle/admin/SECURDB10G)))
SSL_CLIENT_AUTHENTICATION=FALSE
sqlnet.ora
SSL_CLIENT_AUTHENTICATION=FALSE
SSL_CIPHER_SUITES=(SSL_DH_anon_WITH_3DES_EDE_CBC_SHA, SSL_DH_anon_WITH_RC4_128_
MD5, SSL_DH_anon_WITH_DES_CBC_SHA)
WALLET_LOCATION=(SOURCE=(METHOD=FILE)
(METHOD_DATA=(DIRECTORY=/u01/oracle/admin/SECURDB10G)))
tnsnames.ora
SECURDB10G =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = 10.143.44.108)(PORT = 1521))
(ADDRESS = (PROTOCOL = TCPS)(HOST = 10.143.44.108)(PORT = 2484))
)
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = SECURDB10G)
)
)
3. The database connection call requires the following properties to be set, either as
system properties or JDBC connection properties:
Property Value
oracle.net.ssl_cipher_suites (SSL_DH_anon_WITH_3DES_EDE_CBC_SHA, SSL_DH_
anon_WITH_RC4_128_MD5,
SSL_DH_anon_WITH_DES_CBC_SHA)
javax.net.ssl.trustStore Path and file name of trust store
For example:
/DevTools/Testing/Secure10g/truststore/truststore
javax.net.ssl.trustStoreType JKS
javax.net.ssl.trustStorePassword Password for trust store
3. The following changes have to be made for the connection pool that is defined in
the following files:
■ server/pos/config/DefaultDataTechnician.xml
■ server/pos/config/EnterpriseDataTechnician.xml
The following example shows the DefaultDataTechnician.xml file.
<POOL class="DataConnectionPool" name="jdbcpool"
package="com.extendyourstore.foundation.manager.data">
<POOLPROPERTY propname="numConnections" proptype="INTEGER"
propvalue="8"/>
<CONNECTION class="JdbcDataConnection"
package="com.extendyourstore.foundation.manager.data">
This chapter provides information about the installation procedures for Oracle Retail
Point-of-Service on the IBM stack using Linux.
Oracle Retail provides an installer for Point-of-Service, but customer installations
typically develop custom procedures. Note that the installer is not appropriate for all
installations. Oracle Retail expects implementation teams to develop custom
procedures for actual register installations, which may or may not be based on the
installer described here. For guidelines, see "Creating a Custom Installation".
Create the Database Schema Owner and Data Source Connection Users
A user to own the database schema and a data source connection user used by
Point-of-Service to access the database must be defined. Specific roles must be defined
for each user. The installer asks you to enter the user name and password for both
these users.
4. Grant the following object level privileges to the schema owner user.
grant CREATEIN, DROPIN, ALTERIN ON SCHEMA <schema_owner_role> to user
<schema_owner_role> with GRANT OPTION
3. Grant the privileges, shown in the following example, to the data source
connection user.
grant CONNECT, IMPLICIT_SCHEMA ON DATABASE to <data_source_user>
4. Grant the following object level privileges to the data source connection user.
grant CREATEIN ON SCHEMA <data_source_user> to user <data_source_user> with
GRANT OPTION
The installer grants the data source connection user access to the application database
objects.
Installing Point-of-Service
To establish an initial Oracle Retail Point-of-Service installation or to create a
demonstration system, use the Point-of-Service installer as described in this section.
When you run the installer, it asks you to specify a Tier Type. The following types are
available:
■ N-Tier Client—Choose this when installing the client component.
■ N-Tier Store Server—Choose this when installing the store server component.
Run the installer one time for each machine in the Server Tier and once for each
register.
The installer performs the following steps. Not all steps apply to client and server
installations.
■ Installs Foundation, Retail Domain, and Oracle Retail Point-of-Service jar files.
■ Installs database build scripts and start-up files.
■ Defines Server Tier in the conduit script that starts Point-of-Service for the given
machine.
■ Defines hostnames or IP addresses and port numbers for the Store Server and
database server.
■ Defines device availability.
■ Defines application properties for Store ID and Register Number.
To turn off auto-config, update the jpos.properties file. The typical location for
this file is /opt/ibm/javapos/etc/jpos/jpos.properties. Replace the existing
entries with the following:
#jpos.config.regPopulatorClass=com.ibm.jpos.tools.autoconfig.SDIPopulator
jpos.config.populator.class.0=jpos.config.simple.xml.SimpleXmlRegPopulator
jpos.config.populator.class.1=jpos.config.simple.SimpleRegPopulator
Update the jpos.xml file to reflect the devices used on the machine. The typical
location for this file is /opt/ibm/javapos/etc/jpos.xml.
1. To configure the default scanner, replace the existing entry or add the following
entry to the jpos.xml file:
JposEntry logicalName="defaultScanner">
<creation
factoryClass="com.extendyourstore.jpos.CrsJposServiceInstanceFactory"
serviceClass="com.extendyourstore.jpos.Scanner.Simple3"/>
<vendor name="360Commerce" url="http://www.360commerce.com"/>
<jpos category="Scanner" version="1.5"/>
<product description="360Commerce Serial Scanner"/>
</JposEntry>
2. To configure the Ingenico device for signature capture, replace the existing entry
or add the following entry to the jpos.xml file. Change
<pos_install_directory>, shown in bold in the following example, to your
installation directory for Point-of-Service:
<JposEntry logicalName="defaultSignatureCapture">
<creation factoryClass="services.IngenicoServiceInstanceFactory"
serviceClass="services.et1k.sigcap.SignatureCaptureService"/>
<vendor name="Ingenico" url="http://www.ingenico-us.com"/>
<jpos category="SignatureCapture" version="1.5.2"/>
<product description="ET1K POS Signature Capture JavaPOS Service
from Ingenico, Inc."
name="Ingenico ET1K Signature Capture Service for JavaPOS(TM)
Standard"
url="http://www.ingenico-us.com"/>
<!--Other non JavaPOS required property (mostly vendor properties
and bus specific properties i.e. RS232 )-->
<prop name="stopBits" value="1"/>
<prop name="portName" value="COM1"/>
<prop name="dataBits" value="8"/>
<prop name="timeOut" value="5000"/>
<prop name="baudRate" value="9600"/>
<prop name="parity" value="0"/>
<prop name="TestForm" value="sigtest.icf"/>
<prop name="SigCompression" value="2byte"/>
<prop name="ConfigPath" value=
"<pos_install_directory>/pos/config/device/ingenico/"/>
<prop name="debug" value="ON"/>
</JposEntry>
3. To configure the Ingenico device for the screens used within the Point-of-Service
application, replace the existing entry or add the following entry to the jpos.xml
file. Change <pos_install_directory>, shown in bold in the following
example, to your installation directory for Point-of-Service:
<JposEntry logicalName="defaultForm">
<creation factoryClass="services.IngenicoServiceInstanceFactory"
serviceClass="services.et1k.form.FormService"/>
<vendor name="Ingenico" url="http://www.ingenico-us.com"/>
<jpos category="Form" version="1.5.2"/>
<product description="ET1K POS Form JavaPOS Service from Ingenico,
Inc."
name="Ingenico ET1K Form Service for JavaPOS(TM) Standard"
url="http://www.ingenico-us.com"/>
<!--Other non JavaPOS required property (mostly vendor properties
and bus specific properties i.e. RS232 )-->
<prop name="stopBits" value="1"/>
<prop name="portName" value="COM1"/>
<prop name="dataBits" value="8"/>
<prop name="baudRate" value="9600"/>
<prop name="parity" value="0"/>
<prop name="timeOut" value="5000"/>
<prop name="clear" value="clear.icf"/>
<prop name="ItemsForm" value="scrollingtext.icf"/>
<prop name="SigCapForm" value="sigtest.icf"/>
<prop name="ScrollingText" value="scrollingtext.icf"/>
4. To configure the Ingenico PIN pad, replace the existing entry or add the following
entry to the jpos.xml file:
<JposEntry logicalName="defaultPINPad">
<creation factoryClass="services.IngenicoServiceInstanceFactory"
serviceClass="services.et1k.pinpad.PINPadService"/>
<vendor name="Ingenico" url="http://www.ingenico-us.com"/>
<jpos category="SignatureCapture" version="1.5.2"/>
</JposEntry>
5. To configure the Ingenico MSR device, replace the existing entry or add the
following entry to the jpos.xml file:
<JposEntry logicalName="ingenicoMSR">
<creation factoryClass="services.IngenicoServiceInstanceFactory"
serviceClass="services.et1k.msr.MSRService"/>
</JposEntry>
6. To configure the default printer, replace the existing entry or add the following
entry to the jpos.xml file:
<JposEntry logicalName="defaultPrinter">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"/>
serviceClass="com.ibm.jpos.services.SdiIBM4610EPOSPrinter"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="POSPrinter" version="1.9.3"/>
<product description="IBM JavaPOS(TM) POSPrinter RS485 Service for IBM
4610 TI2/3/4/5/8/9 TM/F 6/7 Printer" name="IBM JavaPOS for Linux/Windows
Version 1.9.3" url="http://www.pc.ibm.com/store/"/>
7. To configure the default MICR device, replace the existing entry or add the
following entry to the jpos.xml file:
<JposEntry logicalName="defaultMICR">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"
serviceClass="com.ibm.jpos.services.IBM4610MICR"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="MICR" version="1.9.3"/>
<product description="IBM JavaPOS(TM) MICR RS485 Service for IBM 4610
TI2/4/8/9 Printer" name="IBM JavaPOS for Linux/Windows Version 1.9.3"
url="http://www.pc.ibm.com/store/"/>
8. To configure the default keyboard, replace the existing entry or add the following
entry to the jpos.xml file:
<JposEntry logicalName="defaultPOSKeyboard">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"
serviceClass="com.ibm.jpos.services.IBMPOSKeyboard"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="POSKeyboard" version="1.9.3"/>
<product description="IBM JavaPOS(TM) POSKeyboard PS2 Service for IBM
4820/ANKPOS/CANPOS/NANPOS/SureONE Keyboards" name="IBM JavaPOS for
Linux/Windows Version 1.9.3" url="http://www.pc.ibm.com/store/"/>
9. To configure the default MSR, replace the existing entry or add the following entry
to the jpos.xml file:
<JposEntry logicalName="defaultMSR">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"name="Ingenic
o ET1K Form Service for JavaPOS(TM) Standard"
url="http://www.ingenico-us
serviceClass="com.ibm.jpos.services.IBMMSR"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="MSR" version="1.9.3"/>
10. To configure the default cash drawer, replace the existing entry or add the
following entry to the jpos.xml file:
<JposEntry logicalName="defaultCashDrawer">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"
serviceClass="com.ibm.jpos.services.IBMCashDrawer"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="CashDrawer" version="1.9.3"/>
<product description="IBM JavaPOS(TM) CashDrawer Service for IBM
SurePOS 300/72x/74x/78x-A" name="IBM JavaPOS for Linux/Windows Version 1.9.3"
url="http://www.pc.ibm.com/store/"/>
11. To configure the default line display, replace the existing entry or add the
following entry to the jpos.xml file:
<JposEntry logicalName="defaultLineDisplay">
<creation
factoryClass="com.ibm.jpos.services.IBMJposServiceInstanceFactory"
serviceClass="com.ibm.jpos.services.LineDisplayLCVFD"/>
<vendor name="IBM" url="http://www.ibm.com"/>
<jpos category="LineDisplay" version="1.9.3"/>
<product description="IBM JavaPOS(TM) LineDisplay USB Service for IBM
Vaccum Fluorescent Display (VFD)-A" name="IBM JavaPOS for Linux/Windows Version
1.9.3" url="http://www.pc.ibm.com/store/"/>
value="0xFF45"/>
<prop name="com.ibm.posj.bus.deviceNumber" type="String" value="0"/>
</JposEntry>
2. Set the JAVA_HOME environment variable to the location of your jdk, for example,
/opt/j2sdk1.5. The variable must be set to the location of the jdk and not the
jre.
Note: The usage details for install.sh are shown below. The typical
usage for GUI mode does not use arguments.
install.sh [text | silent oracle]
4. Run one of the available dbbuild.bat targets to create the database schema, load
data, and load the procedures for purging aged data in the database. For
information on the purge procedures, see the Oracle Retail Point-of-Service
Operations Guide.
■ seed_data: loads seed data
■ test_data: loads test data
■ load_purge_procedures: loads database purge procedures
For example, dbbuild seed_data
5. If Central or Central, Local Failover was selected for the Transaction Retrieval
Location, run scratchpad.bat to create the Scratchpad database.
Securing Communication
After running the installer, communication with the database and communication
between the store server and registers must be secured.
■ For information on securing the JDBC, see Chapter 5.
■ For information on enabling secure RMI between the store server and registers, see
Chapter 6.
b. Copy the new policy jar files into the JRE security directory.
cd /<tmp>
cp local_policy.jar $JRE_HOME/lib/security
cp US_export_policty.jar $JRE_HOME/lib/security
Running Point-of-Service
You run the Oracle Retail Point-of-Service system by executing the shell scripts, found
in your installation’s bin directory, to launch various components.
To run Point-of-Service:
1. Start the store server:
StoreServerConduit.sh
When the message TierManager Started appears, the server has started. The server
component does not have a user interface.
2. Start the registers.
For each of the Point-of-Service registers, execute the conduit script that starts the
Point-of-Service client component. Use the following command:
ClientConduit.sh
3. Verify the installation on each register by logging in to Point-of-Service.
If the login is successful and the status bar indicates the database is online, the
installation is complete.
– You must change the WorkstationID value for the target machines to a unique
number. This value can be found in
<POS_install_directory>/pos/config/application.properties.
■ Create a custom installer which allows for various hardware options but specifies
the software choices your company has chosen.
IBM DB2 has supported SSL encryption since version 9.1 Fix Pack 3. Information on
how to configure SSL on the server and client can be found at the following websites:
■ http://publib.boulder.ibm.com/infocenter/db2luw/v9/index.jsp?to
pic=/com.ibm.db2.udb.uprun.doc/doc/t0025241.htm
■ http://www-1.ibm.com/support/docview.wss?uid=swg21249656
This chapter has information on how to enable SSL for IBM DB2. Information from the
DB2 V9 Information Center, Global Security Kit Secure Sockets Layer Introduction, and
iKeyman User's Guide is included in this appendix.
Summary
To secure JDBC on IBM DB2 requires the following:
■ An SSL provider must be established on the DB2 server.
■ The provider requires a digital certificate and corresponding private key to
provide the secure communications.
■ The client either needs to have a copy of the digital certificate or trust the signer of
the server certificate.
■ The client needs to be configured to use the secure service, and optionally use a
FIPS-compliant SSL provider.
Prerequisites
The information in this section is from the DB2 V9 Information Center.
1. Make sure you have the required fix pack version of DB2.
To determine the fix pack level you have, run the db2level command at the
command line. If you have a fix pack version earlier than Fix Pack 3, you need to
obtain Fix Pack 3 or a later version.
2. Make sure the GSKit is installed.
On linux, it is located in /usr/local/ibm/gsk7.
3. Make sure the GSKit libraries are in the path.
Make sure the /usr/local/ibm/gsk7/lib directory is included in
LD_LIBRARY_PATH.
4. For information on how to check if the connection concentrator is in use, see the
IBM documentation.
For example:
/home/db2inst1/sqllib/cfg/SSLconfig.ini
■ For Windows:
<INSTHOME>\SSLconfig.ini
For example:
F:\IBM\SQLLIB\DB2\SSLconfig.ini
3. Add SSL parameters to the SSL configuration file. The SSLconfig.ini file
contains the SSL parameters that are used to load and start SSL. The list of SSL
parameters are shown in the following table:
4. Add the value SSL to the DB2COMM registry variable. For example, use the
following command:
db2set -i <db2inst1> DB2COMM=SSL
where <db2inst1> is the IBM DB2 instance name.
The database manager can support multiple protocols at the same time. For
example, to enable both TCP/IP and SSL communication protocols:
db2set -i <db2inst1> DB2COMM=SSL,TCPIP
5. Restart the IBM DB2 instance. For example, use the following commands:
db2stop
db2start
At this point, the server should be ready to start serving SSL connections. You can
check the db2diag.log file for errors. There should be no errors pertaining to
SSL after the restart.
2. Set security properties to ensure that all JSSE code uses the IBMJSSE2 provider.
The following example shows the entries in java.security.
ssl.SocketFactory.provider=com.ibm.jsse2.SSLSocketFactoryImpl
ssl.ServerSocketFactory.provider=com.ibm.jsse2.SSLServerSocketFactoryImpl
Useful Links
For more information, see the following websites:
■ http://publib.boulder.ibm.com/infocenter/db2luw/v9/topic/com.ib
m.db2.udb.apdv.java.doc/doc/rjvdsprp.htm
This website has documentation of all the properties available in the DB2 Driver
for JDBC.
■ http://publib.boulder.ibm.com/infocenter/db2luw/v9/topic/com.ib
m.db2.udb.apdv.java.doc/doc/tjvjcccn.htm
This website contains documentation of the URL syntax for connecting to DB2
using JDBC.
■ http://retailweb.us.oracle.com:8080/download/attachments/127800
85/sg247555.pdf?version=1
An IBM Redbook on security related issues with DB2 including auditing and data
encryption. It is dated January 18, 2008 and has a product number SG24-7555-00.
■ EncryptValets=true
This causes the RMI communication between Manager/Technician pairs to be
secured.
■ javax.net.ssl.keyStore=$KEYSTORE_FILE$
This points to the keystore that contains the private keys and public
certificates for the server. For example:
javax.net.ssl.keyStore=$JAVA_HOME\\jre\\lib\\security\\<keystore_name>
■ javax.net.ssl.keyStorePassword=!$KEYSTORE_PASSWORD$
This is the encrypted password for the keystore. For example:
javax.net.ssl.keyStorePassword=!changeit
Note: The cipher suites selected for the register have to match the
ones selected for the store server.
■ EncryptValets=true
This causes the RMI communication between Manager/Technician pairs to be
secured.
■ javax.net.ssl.trustStore=$TRUSTSTORE_FILE$
This points to the truststore that contains the public certificates for the client.
For example:
javax.net.ssl.trustStore=$JAVA_HOME\jre\lib\security\<truststore_name>
You need specific details about your environment for the installer to successfully
install the Point-of-Service application. This appendix shows the screens that are
displayed during the installation of the Point-of-Service server. Depending on the
options you select, you may not see some screens or fields.
For each field on a screen, a table is included in this appendix that describes the field.
If you want to document any specific information about your environment for any
field, a Notes row is provided in each table for saving that information.
For the installer screens for a client installation, see Appendix B.
Note: You must choose to accept the terms of the license agreement
in order for the installation to continue.
Field Title Please select the locales you would like to support:
Field Description In addition to the default locale, additional locales can be supported.
Limited locale support in Point-of-Service enables the date, time,
currency, and calendar to be displayed in the format for the selected
locale.
■ To select the locale for Canada, choose en_CA.
■ To select the locale for Great Britain, choose en_GB.
■ To select the local for the United States, choose en_US.
Note: The only language currently supported is United States English.
Example en_US
Notes
This screen is only displayed if WebSphere Application Server is selected for the
Application Server Type. The fields on this screen are described in the following tables.
This screen is only displayed if Oracle 10g is selected for the Database Type. The fields
on this screen are described in the following tables.
This screen is only displayed if DB2 is selected for the Database Type. The fields on
this screen are described in the following tables.
This screen is only displayed if Oracle 10g is selected for the Database Type and
Central or Central, Local Failover is selected for the Transaction Retrieval Location.
The fields on this screen are described in the following tables.
This screen is only displayed if Require Oracle SIM Integration is selected. The field
on this screen is described in the following table.
The fields on this screen are described in the following tables. Up to five KeyStore jar
files may be entered.
■ If Websphere Application Server was selected for the Application Server Type,
the information is available in
<WebSphere Application Server install>/profiles/
<profile name>/logs/About this profile.txt.
BOOTSTRAP_ADDRESS is the port number.
The fields on this screen are described in the following tables.
■ If Websphere Application Server was selected for the Application Server Type,
the information is available in
<WebSphere Application Server install>/profiles/
<profile name>/logs/About this profile.txt.
BOOTSTRAP_ADDRESS is the port number.
The fields on this screen are described in the following tables.
This screen is only displayed if ISD is selected for the Tender Authorization. The fields
on this screen are described in the following tables.
You need the following details about your environment for the installer to successfully
install the Point-of-Service application. This appendix shows the screens that are
displayed during the installation of the Point-of-Service client. Depending on the
options you select, you may not see some screens or fields.
For each field on a screen, a table is included in this appendix that describes the field.
If you want to document any specific information about your environment for any
field, a Notes row is provided in each table for saving that information.
For the installer screens for a client installation, see Appendix A.
Note: You must choose to accept the terms of the license agreement
in order for the installation to continue.
Field Title Please select the locales you would like to support:
Field Description In addition to the default locale, additional locales can be supported.
Limited locale support in Point-of-Service enables the date, time,
currency, and calendar to be displayed in the format for the selected
locale.
■ To select the locale for Canada, choose en_CA.
■ To select the locale for Great Britain, choose en_GB.
■ To select the local for the United States, choose en_US.
Note: The only language currently supported is United States English.
Example en_US
Notes
This screen is only displayed if WebSphere Application Server is selected for the
Application Server Type. The fields on this screen are described in the following tables.
The fields on this screen are described in the following tables. Up to five KeyStore jar
files may be entered.
This screen is only displayed if Custom is selected for the Install Profile. The field on
this screen is described in the following table.
This screen is only displayed if Custom is selected for the Install Profile. The field on
this screen is described in the following table.
This screen is only displayed if Custom is selected for the Install Profile and UTC
Ultima 800 is selected as a POS Platform Component. The fields on this screen are
described in the following tables.
■ If Websphere Application Server was selected for the Application Server Type,
the information is available in
<WebSphere Application Server install>/profiles/
<profile name>/logs/About this profile.txt.
BOOTSTRAP_ADDRESS is the port number.
The fields on this screen are described in the following tables.
This screen is only displayed if ISD is selected for the Tender Authorization. The fields
on this screen are described in the following tables.
In addition to the GUI and text interfaces of the Point-of-Service installer, there is a
silent mode that can be run. This mode is useful if you wish to run a new installation
and use the settings you provided in a previous installation. It is also useful if you
encounter errors in the middle of an installation and wish to continue after resolving
them.
The installer runs in two distinct phases. The first phase involves gathering settings
from the user. At the end of the first phase, a properties file named
ant.install.properties is created with the settings that were provided. In the
second phase, this properties file is used to provide your settings for the installation.
To skip the first phase and re-use the ant.install.properties file from a
previous run, follow these instructions:
1. Edit the ant.install.properties file and correct any invalid settings that
may have caused the installer to fail in its previous run.
2. Run the installer again with the silent argument.
install.sh silent [oracle | websphere]
Both the database schema and application installers for the Point-of-Service product
will ask for several different URLs. These include the following.
Solution:
This error usually occurs because the JRE that you are pointing to does not contain the
updated java.security and java.policy files.
"java.lang.NullPointerException"
Symptom:
The application dies when starting up. Check the
<POS_install_directory>/pos/logs/installer_log.txt file. In the log file,
search for Database 'offlinedb' not found.
ERROR 2007-07-29 15:54:49,608 4938
(main:com.extendyourstore.foundation.manager.data.JdbcDataConnection):
[com.extendyourstore.foundation.manager.data.JdbcDataConnection.logSQLException
(JdbcDataConnection.java:1355)] Get Connection failed :Database 'offlinedb' not
found.
Solution:
This error occurs the first time the client is started after it is installed. The server was
unable to establish a connection to the database. This prevented the offlinedb database
from being created.
This error usually occurs because incorrect information was entered on the Database
Configuration screen during the install. Reinstall the server with the correct database
configuration information. Check that the IDDI folder was created for the server in
<POS_install_directory>/pos/bin.
This appendix contains information that may be useful if you encounter errors
running Point-of-Service for the first time after an install.
The configuration steps enable Point-of-Service to communicate with Back Office and
Central Office in order to receive parameter updates and to send EJournal and
POSLogs up to Central Office. If you have problems, you may want to ensure the steps
were successfully completed by the installer.
Client Configuration
To configure the client:
1. Verify the following class path entries in the
<POS_install_directory>\pos\bin\posenv.bat file.
SET CLASSPATH=%CLASSPATH%;%_360COMMON_PATH%\common\build\oc4j-internal.jar
SET CLASSPATH=%CLASSPATH%;%_360COMMON_PATH%\common\build\javax77.jar
SET CLASSPATH=%CLASSPATH%;%_360COMMON_PATH%\common\build\jta.jar
SET CLASSPATH=%CLASSPATH%;%_360COMMON_PATH%\common\build\jms.jar
SET CLASSPATH=%CLASSPATH%;%_360COMMON_PATH%\common\build\optic.jar
3. Add the Back Office queue and topic connection factory entries to the
<POS_install_directory>\pos\bin\comm.properties file.
comm.jms.topicConnectionFactory.name=jms/ApplicationTCF
comm.jms.queueConnectionFactory.name=jms/ApplicationQCF
propvalue="classpath://config/manager/PosParameterTechnician.xml"/>
<PROPERTY propname="JmsProviderTopicName"
propvalue="jms/parameters"/>
<PROPERTY propname="listenForUpdates" propvalue="Y"/>
<PROPERTY propname="clientID" propvalue="reg129"/>
<PROPERTY propname="jmsID" propvalue="oc4jadmin"/>
<PROPERTY propname="jmsPassword" propvalue="!<password>"/>
</TECHNICIAN>
2. Change the
<POS_install_directory>\pos\config\backoffice.jndi.properties
and
<POS_install_directory>\pos\bin\jndi.properties files to point to
Back Office.
java.naming.provider.url=
ormi://<Back Office Server Name>:<Back Office Port Number>
java.naming.factory.initial=com.evermind.server.rmi.RMIInitialContextFactory
java.naming.security.principal=oc4jadmin
java.naming.security.credentials=oc4jadmin
4. Add the Back Office and Central Office queue and topic connection factory entries
to the
<POS_install_directory>\pos\bin\comm.properties file.
comm.jms.topicConnectionFactory.name=jms/ApplicationTCF
comm.jms.queueConnectionFactory.name=jms/ApplicationQCF
comm.jms.topicConnectionFactory.name.<Central Office Server Name>=
jms/ApplicationTCF
comm.jms.queueConnectionFactory.name.<Central Office Server Name>=
jms/ApplicationQCF
propvalue="com.extendyourstore.domain.manager.datareplication.DataReplicati
onExportDaemonThread"/>
<PROPERTY propname="sleepInterval"
propvalue="15"/>
<PROPERTY propname="logWriterClass"
propvalue="com.extendyourstore.domain.manager.datareplication.JMSDataReplic
ationWriter"/>
<PROPERTY propname="extractorConfigurationFileName"
propvalue="config/ReplicationExportConfig.xml"/>
<PROPERTY propname="queueHostName"
propvalue="com.extendyourstore.domain.manager.export.POSLogExportDaemonThre
ad"/>
<PROPERTY propname="sleepInterval"
propvalue="5"/>
<PROPERTY propname="logWriterClass"
propvalue="com.extendyourstore.domain.ixretail.log.POSLogWriter"/>
<PROPERTY propname="queueHostName"
propvalue="<Central Office Server Name>"/>
<PROPERTY propname="queueName"
propvalue="jms/POSLog"/>
<PROPERTY propname="logWriterClass"
propvalue="com.extendyourstore.domain.ixretail.log.JMSPOSLogWriter"/>
</TECHNICIAN>
propvalue="com.extendyourstore.pos.manager.journal.POSJournalFormatter"/>
<PROPERTY propname="journalHandlerClass"
propvalue="com.extendyourstore.pos.manager.journal.POSJMSJournalHandler"/>
<PROPERTY propname="queueName" propvalue="jms/EJournal"/>
<PROPERTY propname="consolePrintable" propvalue="N"/>
</TECHNICIAN>
propvalue="com.extendyourstore.domain.manager.messagecenter.MessageCenterDaemon
Thread"/>
<PROPERTY propname="senderQueueName"
propvalue="jms/EJournalImport"/>
<PROPERTY propname="senderBrokerName"
propvalue="<Central Office Server Name>"/>
<PROPERTY propname="receiverQueueName"
propvalue="jms/EJournal"/>
<PROPERTY propname="receiverBrokerName"
propvalue=""/>
</TECHNICIAN>
Note: The value set for the queueName property for the
JMSJournalTechnician and the value set for the
receiverQueueName property for the
MessageCenterDaemonTechnician must be the same.
This appendix contains information that may be useful if you encounter errors
running Point-of-Service for the first time after an install.
The configuration steps enable Point-of-Service to communicate with Back Office and
Central Office in order to receive parameter updates and to send EJournal and
POSLogs up to Central Office. If you have problems, you may want to ensure the steps
were successfully completed by the installer.
Client Configuration
To configure the client:
1. If the host names of the Back Office and Central Office servers are not available on
a DNS server, update the /etc/hosts file with the IP address and host name
where Point-of-Service is installed. This step is required for JMS messaging to
work properly.
2. Remove the following class path entries from the
<POS_install_directory>/pos/bin/posenv.sh file.
SET CLASSPATH=$CLASSPATH:$_360COMMON_PATH/common/build/oc4j-internal.jar
SET CLASSPATH=$CLASSPATH:$_360COMMON_PATH/common/build/javax77.jar
SET CLASSPATH=$CLASSPATH:$_360COMMON_PATH/common/build/jms.jar
SET CLASSPATH=$CLASSPATH:$_360COMMON_PATH/common/build/optic.jar
SET CLASSPATH=$CLASSPATH:jboss-4.0.2/lib/jboss-common.jar
SET CLASSPATH=$CLASSPATH:jboss-4.0.2/client/jboss-j2ee.jar
SET CLASSPATH=$CLASSPATH:jboss-4.0.2/client/jbossmq-client.jar
SET CLASSPATH=$CLASSPATH:jboss-4.0.2/client/jnp-client.jar
5. Add the Back Office queue and topic connection factory entries to the
<POS_install_directory>/pos/bin/comm.properties file.
comm.jms.topicConnectionFactory.name=jms/ApplicationTCF
comm.jms.queueConnectionFactory.name=jms/ApplicationQCF
Note: You must create a UNIX user on the host where Back Office is
installed and add that user to the mqm group. The values for jmsID
and jmsPassword specified in the Password Technician definition
must match the values for the UNIX user and password.
5. Change the
<POS_install_directory>/pos/config/backoffice.jndi.properties
and
<POS_install_directory>/pos/bin/jndi.properties files to point to
Back Office.
java.naming.provider.url=
corbaloc:iiop:<Back Office Server Name>:<Back Office Port Number>
6. To use Centralized Transaction Retrieval, there are jar files that must be copied into
the Point-of-Service directory.
8. Add the Back Office and Central Office queue and topic connection factory entries
to the <POS_install_directory>/pos/bin/comm.properties file.
comm.jms.topicConnectionFactory.name=jms/ApplicationTCF
comm.jms.queueConnectionFactory.name=jms/ApplicationQCF
comm.jms.topicConnectionFactory.name.<Central Office Server Name>=
jms/ApplicationTCF
comm.jms.queueConnectionFactory.name.<Central Office Server Name>=
jms/ApplicationQCF
propvalue="60"/>
<PROPERTY propname="logWriterClass"
propvalue="com.extendyourstore.domain.ixretail.log.POSLogWriter"/>
<PROPERTY propname="queueHostName"
propvalue="<Central Office Server Name>"/>
<PROPERTY propname="queueName"
propvalue="jms/POSLog"/>
<PROPERTY propname="logWriterClass"
propvalue="com.extendyourstore.domain.ixretail.log.JMSPOSLogWriter"/>
</TECHNICIAN>
Note: The value set for the queueName property for the
JMSJournalTechnician and the value set for the
receiverQueueName property for the
MessageCenterDaemonTechnician must be the same.
This appendix covers information about defining passwords for compliance with
PABP. It also has specific information for defining passwords for database users. The
following topics are covered:
■ "Password Guidelines"
■ "Special Security Options for Oracle Databases"
■ "Special Security Options for IBM DB2 Databases"
Password Guidelines
To make sure users and their passwords are properly protected, follow these
guidelines. The guidelines are based on the Payment Card Industry Data Security
Standard (PCI-DSS):
■ Verify the identity of the user before resetting any passwords.
■ Set first-time passwords to a unique value for each user and require the password
to be changed immediately after the first use.
■ Immediately revoke access for any terminated users.
■ Remove inactive user accounts at least every 90 days.
■ Enable accounts used by vendors for remote maintenance only during the time
period when access is needed.
■ Communicate password procedures and policies to all users who have access to
cardholder data.
■ Do not use group, shared, or generic accounts and passwords.
■ Require user passwords to be changed at least every 90 days.
■ Require a minimum password length of at least seven characters.
■ Require that passwords contain both numeric and alphabetic characters.
■ Do not accept a new password that is the same as any of the last four passwords
used by a user.
■ Limit the number of repeated access attempts by locking out the user ID after not
more than six attempts.
■ Set the lockout duration to thirty minutes or until an administrator enables the
user ID.
The password complexity verification routine ensures that the password meets the
following requirements:
■ Is at least four characters long
■ Differs from the user name
■ Has at least one alpha, one numeric, and one punctuation mark character
■ Is not simple or obvious, such as welcome, account, database, or user
■ Differs from the previous password by at least three characters
For example, to set the password to expire as soon as the user logs in for the first time:
CREATE USER jbrown
IDENTIFIED BY zX83yT
...
PASSWORD EXPIRE;
The keytool utility is included with the JRE. It is used to create new keys, import
digital certificates, export existing keys, and interact with the key management system.
2. Once the Certificate Signing Request is saved in a file, send it to the Certificate
Authority of your choice. To get a trial certificate, see the following website:
https://www.thawte.com
3. When the response from the Certificate Authority is received, save the certificate
in a file from which it can be imported. In order to import the certificate, the root
certificate must be in your list of trusted certificate authorities, or you must accept
the root certificate selected by the keytool utility.
4. To import the certificate, use the following command:
keytool -import -keystore <your_keystore_name>
-file <your_certificate_file.cer> -alias <your_alias> -trustcacerts
For development or testing purposes, it should not be necessary to get a trial certificate
or have your certificate signed.