Secure Implementation Guide - SICOM Systems, Inc.

OpenVPN
When attempting to connect with a system running MGRNG version 1.42 and higher, you might
be required to connect to the restaurant over a VPN (Virtual Private Networking) connection. This
section details the steps necessary to install, configure, and use the OpenVPN software on your
Windows XP computer. OpenVPN cannot be used on a Windows 9x/Me.
OpenVPN is a software package that SICOM Systems, Inc. has chosen to use as the VPN server
on SL Series terminals. It requires the OpenVPN client to connect to the server. You cannot use
the built-in Windows XP VPN client. OpenVPN supports the use of password and “certificate”
authentication, so called “dual-factor authentication”, that is required for our customers to remain
PCI compliant in their sales environments.
The actual restaurant configuration and the type of access to the system desired will determine if
OpenVPN is needed. A very secure installation will require OpenVPN for all connectivity to the
system. Most configurations will allow browser access via SSL – HTTPS, but will also require
OpenVPN for shell and FTP access. Simply put, most IT department personnel retrieving poll
files or downloading auto-updates of other data files will be required to use OpenVPN or some
other VPN solution.
Certificate needed before continuing
Each user granted access to the system through the VPN will need his own security certificate in
addition to being listed in the Remote Access User edit in the system. The Security Certificate is
good for all restaurants owned by the company. Contact SICOM Systems for details and
procedures required to obtain these certificates. Remote users need to be re-added if a hard
drive is replaced in the restaurant.
OpenVPN Installation
First, the OpenVPN software needs to be installed on your Windows computer. It requires
Windows XP and will not work on Windows 9x or Me computers. The latest version of the
software is available at http://openvpn.net/download.html The current release as of this
document’s date is 2.0.9. Select the “Windows Installer” download link, and save the file to your
hard drive. Once the file is downloaded, double-click the saved file to begin the installation.
There is also a Graphical User Interface version (OpenVPN GUI for Windows) available at
http://openvpn.se/download.html
Installation of OpenVPN Package
You will see a security warning displayed by Windows. Click “Run” to continue.
27