Gasboy CFN III Fuel Management System PA-DSS - Manual (Page 9)

MDE-4870A CFN III Fuel Management System PA-DSS Implementation Guide Version 3.6 · June 2010 Page 5
User Accounts Getting Started
CFN III User Passwords and Permission Levels
Note: Contact Gasboy Technical Support if you do not know the CFN III Manager password.
Upgrading from a non-secure version will result in the removal of previous passwords. For
more information on obtaining a password, refer to MDE-4739 CFN III PCI Secure Controller
Software Installation/Upgrade Instructions.
Manager permission level access must not be granted for passwords that are used by general
CFN users. CFN general users and managers must meet the minimum password requirements
listed in
“Appendix A: PCI Password Requirements” on page A-1 . A unique CFN User ID
must be used for every individual that will be accessing the CFN system.
Windows XPE Users and Passwords
The Windows XP Embedded (XPE) PC is set up for three users - “Administrator”, “guest”,
and “gasboy”. The “guest” user is disabled and must not be enabled. The “gasboy” user is a
hybrid user and the account type for the “gasboy” user must not be modified or the system will
not meet PCI PA-DSS requirement 8.
The “Administrator” user is the Windows system administrator and, as default, is set up
without a password. On completion of the system install and the embedded payment system
configuration, the “Administrator” user password must be set. This administrator account
must be assigned to one individual only and only that individual must know the password. The
password is set up by logging onto the Windows XPE as the “Administrator” user, through the
Control Panel “User Accounts”.
If other employees require administrative rights to Windows XP, such as access to Audit logs
for backup, then additional administrative level users must be created for each individual.
These accounts can be created by logging onto the Windows XPE as an administrator user,
accessing the Control Panel “User Accounts”, and adding a user.
For PCI password requirements, refer to “Appendix A: PCI Password Requirements” on
page A-1 .
Screen Saver
To ensure that only the intended individual has access to the system, a password-protected
screen saver must be used for each Administrative level user account.
1 Log on to the system using an Administrative level user account.
2 Right-click on the desktop.
3 Select Properties.
4 Select Screen Saver tab in the Display Properties box.
5 Select any option other than “None” from the list of options for Screen Saver.
6 Set the wait time to 5 minutes.