This section holds links for non-firmware downloadable software for MagTek products, organized by device.

Downloadable Software

Dimensions - Financial Transaction Cards

ISO

76 alphanumeric data characters between Format Code and Discretionary Data.

• SS: Start Sentinel - %

• FC: Format Code - ^

• PAN: Primary Account Number (19 digits max.)

• FS: Field Separator

37 data characters between PAN and Discretionary Data.

• SS: Start Sentinel - Hex B - ;

• PAN: Primary Account Number (19 digits max.)

• FS: Field Separator - Hex D - =

• ADDITIONAL DATA: Number of characters:

• ES: End Sentinel - Hex F - ?

• LRC: Logitudinal Redundancy Check character

104 numeric data characters between Format Code and Additional Data.

• SS: Start Sentinel - Hex B - ;

• PAN: Primary Account Number (19 digits max.)

• FS: Field Separator - Hex D - =

• USE AND SECURITY DATA - Number of characters

• ES: End Sentinel - Hex F - ?

• LRC: Logitudinal Redundancy Check character

• FC: Format Code - (2 digits) (in place of optional field)

Copyright © 2006 - 2024 MagTek, Inc.MagTek® is a registered trademark of MagTek, Inc.MagnePrint® is a registered trademark of MagTek, Inc.MagneSafe® is a registered trademark of MagTek, Inc.Magensa™ is a trademark of MagTek, Inc.AAMVA™ is a trademark of AAMVA.American Express® and EXPRESSPAY FROM AMERICAN EXPRESS® are registered trademarks of American Express Marketing & Development Corp.Apple Pay® is a registered trademark to Apple Inc.D-PAYMENT APPLICATION SPECIFICATION® is a registered trademark to Discover Financial Services CORPORATIONMasterCard® is a registered trademark and PayPass™ and Tap & Go™ are trademarks of MasterCard International Incorporated.Visa® and Visa payWave® are registered trademarks of Visa International Service Association.ANSI®, the ANSI logo, and numerous other identifiers containing "ANSI" are registered trademarks, service marks, and accreditation marks of the American National Standards Institute (ANSI).ISO® is a registered trademark of the International Organization for Standardization.PCI Security Standards Council® is a registered trademark of the PCI Security Standards Council, LLC.EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC. The Contactless Indicator mark, consisting of four graduating arcs, is a trademark owned by and used with permission of EMVCo, LLC.UL™ and the UL logo are trademarks of UL LLC.All other system names and product names are the property of their respective owners.

The device always encrypts account data from all three reader types using 112-bit TDEA, 128-bit AES, or 256-bit AES algorithms with X9.24 DUKPT key management. This device does not support any mechanisms such as whitelists or SRED disable that would allow the data to be sent out unencrypted.

The device includes the following cryptographic algorithms:

• AES

• TDEA

Overview

DynaFlex II Go and DynaFlex II Go BCR deliver the next generation of mobile payment solutions, both models are PCI PTS 6.x. This document provides an abbreviated version of the Installation and Operation Manual, PN D998200595 hosted on www.magtek.com. These secure card reader authenticator devices accept magnetic stripe cards; EMV chip cards (contact and contactless); NFC enabled mobile wallets including Apple® Pay, Samsung™ Pay, Google Pay™, with support for Google Smart Tap and Apple VAS protocols, and MIFARE® Classic,

MIFARE® DESFire, and NTag. DynaFlex II Go BCR additionally has an integrated barcode reader. Ideal for cafés, restaurants, boutiques, airlines, retail banks, and other developers looking to build a secure payment solution that accepts swipe, tap, and dip technology.

Major Components

DynaFlex II Go Major Components

Top Face

Environmental Notice

DynaFlex II Go products are designed to provide flexible mounting options. The device can be mounted to the host via an external clip or the embedded lanyard. When designing an enclosure or mounting bracket, ensure there is adequate clearance for cardholders to tap, swipe, dip, and

for users to present a bar code. Proximity to metal can reduce the device’s reading range. DynaFlex II Go offers an optional OtterBox uniVERSE clip adapter and a countertop stand.

DynaFlex II Go is available with USB-C or USB-C and Bluetooth LE connection. Check you model number for connection configuration.

For best results, use the cable that is included with the device. Connect the cable to the device. Connect the other end to the HOST USB port. Device will automatically power on. Windows will start an installation of the driver on initial connection. Windows will report DEVICE IS READY and device

shows in Windows Device Manager under HUMAN INTERFACE DEVICES as two devices HID-COMPLIANT VENDOR-DEFINED (VID 0801, PID 2024) and USB INPUT DEVICES.

See D998200386 MagTek Universal SDK

Disconnect any active connections to the device. Install Android HOST software. Press and hold the POWER BUTTON for 4 beeps until LED 4 starts flashing indicating Bluetooth LE pairing is in process. LED flashes once per second for up to 3 minutes. On the Android HOST, launch SETTINGS >BLUETOOTH> SEARCH FOR DEVICES > locate

the 7-digit serial number on the device label (DF II GO_xxxxxxx). Select device. When HOST shows BLUETOOTH PAIRING REQUEST and asks for configuration key, enter [000000]. The device appears in PAIRED DEVICES. Change the default passkey.

To UNPAIR, locate the device in BLUETOOTH configuration page on HOST, press the settings (gear) icon, press FORGET.

Ensure HOST Bluetooth LE is turned on and working. Disconnect any other connections to the device. On the HOST, install and configure the software. Ensure HOST software is configured to look for the device. The device transmits in GATT format. In START on HOST type BLUETOOTH and select BLUETOOTH AND OTHER DEVICE

SETTINGS. Locate the 7-digit serial number on device label. Press and hold the POWER BUTTON on device for 4 beeps until LED 4 starts flashing indicating Bluetooth pairing is in process. LED flashes once per second for up to 3 minutes. Press the ADD BLUETOOTH OR OTHER DEVICE button and launch ADD A DEVICE window. Under CHOOSE THE KIND OF DEVICE YOU WANT TO ADD select BLUETOOTH.

Locate the device called DF II GO-xxxxxxx. Enter configured passkey (000000) press the CONNECT button. After a short period CONNECTED appears. Press DONE. Change the default passkey.

To UNPAIR, select the device in BLUETOOTH AND OTHER DEVICE SETTINGS window and press the REMOVE DEVICE button.

DynaFlex II Go receives power from the USB-C port. The battery must be periodically recharged by connecting the device to a USB port or stand-alone USB charger. The device requires a USB power supply that

can provide at least 500mA @ 5V.

• Powered Off Mode is the shipping and storage mode of the device. No external power is applied to the device through the USB cable or from the internal rechargeable battery.

• Active Mode is the device’s normal “awake” state when it is in use. In this mode, the device LED indicators are powered on, and the device is ready to receive commands from the host.

• To set the device from Active mode to Powered Off mode: remove power, and press and hold the power button for two beeps.

DynaFlex II Go has 4 LEDs that provide responses to the user for Power, Connection, Device Status, and Card Status. The Installation and Operation Manual has a more complete list of light signals.

The device does not have an on-screen configuration interface. However, it does have settings the HOST can change using commands.

Operator presses the Start transaction button on the HOST device. LED 1 and 2 will remain on. When a card is swiped, all four LEDs will turn on in sequence (1, 2, 3 then 4), followed by a long beep, indicating a successful transaction. Swipe the card with the magnetic stripe facing away from the face of the device. After a successful transaction, the device will return to the ready state.

Locate the insertion slot on the face of the device. Orient the chip card so the chip faces the face of the device. Insert the chip card into the slot, then push gently on the card until it stops. The operator presses the Start transaction button on the HOST device.

LED 1 and 2 will remain on. When a card is inserted, LEDs 1, 2 and 4 will turn on in sequence, followed by a long beep, indicating a successful transaction.

Hold QR Code or barcode approximately 6 inches away from barcode reader. The operator presses the Start button on the HOST device. LED 1,2, and the BCR status light will be illuminated see. When a barcode is detected, only LED 1 will remain illuminated, the BCR status LED will be off, and a long beep will sound.

The operator presses the Start transaction button on the host device. LED 1 will remain on. When a card is presented within range of the contactless reader, LEDs 1,2,3, and 4 will turn on in sequence, followed by a long beep, indicating a successful transaction. Tap the card or electronic payment device on the contactless landing zone, indicated by the EMVCo Contactless Indicator on the device’s face. The card or device’s antenna* must be centered over the contactless landing zone. Remove the card or electronic payment device from the contactless landing zone.

Users can take advantage of the OtterBox® uniVERSE® adaptor for easy sliding and connection to a wide range of mobile devices, including phones and tablets

FCC INFORMATION

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) This device must accept any interference received, including interference that may cause undesired operation.

Note: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

Reorient or relocate the receiving antenna.

Increase the separation between the equipment and receiver.

Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help.

CAUTION

Changes or modifications not expressly approved by MagTek could void the user’s authority to operate this equipment.

CANADIAN DECLARATION OF CONFORMITY

This digital apparatus does not exceed the Class B limits for radio noise from digital apparatus set out in the Radio Interference Regulations of the Canadian Department of Communications.

Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables aux appareils numériques de la classe B prescrites dans le Réglement sur le brouillage radioélectrique édicté par le ministère des Communications du Canada.

This Class B digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe B est conformé à la norme NMB-003 du Canada.

INDUSTRY CANADA (IC) RSS

This device complies with Industry Canada licence-exempt RSS standard(s). Operation is subject to the following two conditions: (1) This device may not cause interference, and (2) This device must accept any interference, including interference that may cause undesired operation of the device.

Le présent appareil est conforme aux CNR d’Industrie Canada applicables aux appareils radio exempts de licence. L’exploitation est autorisée aux deux conditions suivantes: (1) L’appareil ne doit pas produire de brouillage, et (2) L’utilisateur de l’appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d’en compromettre le fonctionnement.

CUR/UR

This product is recognized per Underwriter Laboratories and Canadian Underwriter Laboratories 1950.

CE STANDARDS

Testing for compliance with CE requirements was performed by an independent laboratory. The unit under test was found compliant with standards established for Class B devices.

EU STATEMENT

Hereby, MagTek Inc. declares that the radio equipment types Wideband Transmission System (802.11 wireless and Bluetooth® Low Energy), and Non-Specific Short Range Device (contactless) are in compliance with Directive 2014/53/EU. The full text of the EU declarations of conformity is available at the following Internet addresses:

UL/CSA

This product is recognized per UL 60950 1, 2nd Edition, 2011 12 19 (Information Technology Equipment - Safety - Part 1: General Requirements), CSA C22.2 No. 60950 1 07, 2nd Edition, 2011 12 (Information Technology Equipment - Safety - Part 1: General Requirements).

ROHS STATEMENT

When ordered as RoHS compliant, this product meets the Electrical and Electronic Equipment (EEE) Reduction of Hazardous Substances (RoHS) Directive (EU) 2015/863 amending Annex II to Directive 2011/65/EU. The marking is clearly recognizable, either as written words like “Pb-free,” “lead-free,” or as another clear symbol ( Pb ).

PCI STATEMENT

PCI Security Standards Council, LLC (“PCI SSC”) has approved this PIN Transaction Security Device to be in compliance with PCI SSC’s PIN Security Requirements.

When granted, PCI SSC approval is provided by PCI SSC to ensure certain security and operational characteristics important to the achievement of PCI SSC’s goals, but PCI SSC approval does not under any circumstances include any endorsement or warranty regarding the functionality, quality or performance of any particular product or service. PCI SSC does not warrant any products or services provided by third parties. PCI SSC approval does not under any circumstances include or imply any product warranties from PCI SSC, including, without limitation, any implied warranties of merchantability, fitness for purpose, or non-infringement, all of which are expressly disclaimed by PCI SSC. All rights and remedies regarding products and services which have received PCI SSC approval shall be provided by the party providing such products or services, and not by PCI SSC.

UKCA STATEMENT

Hereby, MagTek Inc. declares that the radio equipment types Wideband Transmission System (Wireless LAN and Bluetooth Low Energy), and Non-Specific Short Range Device (contactless) are in compliance with Radio Equipment Regulations 2017 Directive S.I.2017:1206. The full text of the UKCA declarations of conformity is available at the following Internet addresses:

Document Number: D998200619-108

REGISTERED TO ISO 9001:2015

MagTek® is a registered trademark of MagTek, Inc.

MagnePrint® is a registered trademark of MagTek, Inc.

MagneSafe® is a registered trademark of MagTek, Inc.

Magensa™ is a trademark of MagTek, Inc. iDynamo™ is a trademark of MagTek, Inc.

ANSI®, the ANSI logo, and numerous other identifiers containing "ANSI" are registered trademarks, service marks, and accreditation marks of the American National Standards Institute (ANSI).

ISO® is a registered trademark of the International Organization for Standardization.

UL™ and the UL logo are trademarks of UL LLC.

PCI Security Standards Council® is a registered trademark of the PCI Security Standards Council, LLC.

Apple Pay®, Apple Wallet®, iPhone®, iPod®, Mac®, and OS X® are registered trademarks of Apple Inc., registered in the U.S. and other countries. iPad™ is a trademark of Apple. Inc. App StoreSM is a service mark of Apple Inc., registered in the U.S. and other countries. Apple and MFi are registered trademarks of Apple Inc. IOS is a trademark or registered trademark of Cisco in the U.S. and other countries and is used by Apple Inc. under license.

Google Play™ store, Google Wallet™ payment service, and Android™ platform are trademarks of Google LLC.

Microsoft®, Windows®, and .NET® are registered trademarks of Microsoft Corporation.

All other system names and product names are the property of their respective owners

Table 0-1

BCR Payment Transaction Successful (Connected via USB)

When the operator presses the Start button on the host device, LED 1,2, and the BCR status light will be illuminated see the Figure below. When a barcode is detected, only LED 1 will remain illuminated, the BCR status LED will be off, and a long beep will sound see the next Figure.

Figure – BCR Transaction USB Ready State

Figure – BCR Transaction Barcode Detected (Connected via USB)

MSR Payment Transaction Successful (Connected via USB)

When the operator presses the Start transaction button on the host device, LED 1 and 2 will remain on. When a card is swiped, LEDs 1,2 and 4 will turn on in sequence (1,2 then 4), followed by a long beep, indicating a successful transaction, see the Figure below. After a successful transaction, the device will return to the ready state, see the next Figure.

Figure – LED Sequence – Payment Transaction Successful MSR Swipe (Connected via USB)

Figure – Return to Ready State After Successful Transaction

When the operator presses the Start transaction button on the host device, LED 1 and 2 will remain on. When a card is inserted, LEDs 1, 2 and 4 will turn on in sequence, followed by a long beep, indicating a successful transaction, see Figure 7-20 – LED Sequence – Payment Transaction Successful EMV Contact (Connected via USB). LED 4 will remain on, and the device will sound a double beep until the card is removed from the slot. After a successful transaction, the device will return to the ready state, see Figure 7-19.

Figure – LED Sequence – Payment Transaction Successful EMV Contact (Connected via USB)

When the operator presses the Start transaction button on the host device, LED 1 will remain on. When a card is presented within range of the contactless reader, LEDs 1,2,3, and 4 will turn on in sequence, followed by a long beep, indicating a successful transaction, see Figure 7-21 - LED Sequence – Payment Transaction Successful EMV Contactless (Connected via USB). After a successful transaction, the device will return to the ready state, see Figure 7-19.

Figure - LED Sequence – Payment Transaction Successful EMV Contactless (Connected via USB)

When the operator presses the button on the host device, LED 1,2, and the BCR status light will be illuminated see Figure 7-22. When a barcode is detected, only LED 1 will remain illuminated, the BCR status LED will be off, and a long beep will sound see Figure 7-23.

Figure 7-22 – BCR Transaction Bluetooth® LE Ready State

Figure – BCR Transaction Barcode Detected (Connected via Bluetooth® LE)

When the operator presses the transaction button on the host device, LED 1 and 2 will remain on. When a card is swiped, LEDs 1,2 and 4 will turn on in sequence (1,2, then 4), followed by a long beep, indicating a successful transaction, see Figure 7-24. After a successful transaction, the device will return to the ready state, see Figure 7-25.

Figure – LED Sequence – Payment Transaction Successful MSR Swipe (Connected via Bluetooth® LE)

Figure – Return to Ready State After Successful Transaction (Bluetooth® LE Ready State)

When the operator presses the transaction button on the host device, LED 1 and 2 will remain on. When a card is inserted, LEDs 1,2 and 4 will turn on in sequence, followed by a long beep, indicating a successful transaction, see Figure 7-26 - LED Sequence – Payment Transaction Successful EMV Contact (Connected via Bluetooth® LE). LED 4 will remain on and the device will sound a double beep until the card is removed from the slot. After a successful transaction, the device will return to the ready state, see Figure 7-25.

Figure - LED Sequence – Payment Transaction Successful EMV Contact (Connected via Bluetooth® LE)

When the operator presses the Start transaction button on the host device, LED 1 will remain on from ready state. When a card is presented within range of the contactless reader, LEDs 1,2,3, and 4 will turn on in sequence, followed by a long beep, indicating a successful transaction, see Figure 7-27. After a successful transaction, the device will return to the ready state, see Figure 7-25.

Figure - LED Sequence – Payment Transaction Successful EMV Contactless (Connected via Bluetooth® LE)

DynaFlex II Go and DynaFlex II Go with Barcode Reader (BCR) deliver the next generation of mobile payment solutions. Both models offer an integrated secure card reader authenticator for magnetic stripe cards, EMV chip cards (contact and contactless), and NFC enabled mobile wallets including Samsung Pay, Google Pay™ with support for Google VAS, and Apple Pay® with support for Apple VAS. Ideal for cafés, restaurants, boutiques, airlines, retail banks and other developers looking to build a secure payment solution that accepts contactless EMV and NFC payments. DynaFlex II Go is suited for deployment in many scenarios, including mobile handsets, tablets, and desktop computers.

DynaFlex II Go and DynaFlex II Go BCR are equipped with MagneSafe® Security Architecture (MSA). The design and architecture meet the requirements for contactless EMV 3.1, PCI PTS POI v6.2, and support triple DEA encryption with DUKPT Key Management.

Key Features and Components

DynaFlex II Go and DynaFlex II Go BCR are easy to install and configure, with key features that include:

• Contactless EMV 3.1 Approved.

• Contact EMV 4.4a Approved.

• PCI PTS POI v6.2 Approved.

• Optical reading for many 2D and 1D barcodes including PayPal and Venmo (DynaFlex II Go BCR Model Only).

• Transducer for audio alerts.

• User configurable audio commands to play a sequence of tones.

• Bluetooth® Low Energy (LE).

• USB-C interface.

• iAP2® Protocol Support.

• Triple DEA encryption / DUKPT key management.

• AES-128 and AES-256 encryption.

• Ingress protection - IP 30.

• Apple Pay® / Apple Wallet® (Apple VAS protocol support).

• Google Wallet Smart Tap. (Google VAS protocol support).

• Google Pay™.

• NFC Compatibility: Smart cards and contactless IC products, including MIFARE Classic / MIFARE DESFire /MIFARE Plus cards, with the ability to send pass-through commands.

• Optional OtterBox® uniVERSE® case.

• Optional countertop stand.

Figure 1-1 illustrates the major components of DynaFlex II Go (BCR model shown). Models without a barcode reader are identical to the illustration, but do not have a camera and do not have a QR code printed on the front face.

Figure - DynaFlex II Go Major Components

In this document, DynaFlex II Go products are referred to as the device. They are designed to be connected to a host, which is a piece of general-purpose electronic equipment that can send commands and data to, and receive data from, the device. Host types include PC and Mac computers/laptops, tablets, and smartphones. Generally, the host must have software installed that communicates with the device and is capable of processing transactions. During a transaction, the host and its software interact with the operator, such as a customer service representative, while the device interacts with the cardholder (even if the cardholder is using a virtual representation of the card account, such as a smartphone).

After receiving the device, the customer should visually inspect the product as follows:

• Inspect the label found on the bottom of the device (see section 2.3.1 Hardware Identification) and make sure the label is not missing, obscured, or modified.

• Check the PCI Hardware Identifier on the device label and make sure it matches the Hardware # listed for the device on the PCI web site for Approved Devices. Go to the PCI compliance web page and search for MagTek, and find the product name, DynaFlex II Go. Compare the Hardware ID and Firmware ID:

Tailored for use with mobile handsets, tablets, and desktop computers, DynaFlex II Go offers a variety of accessories designed to meet a wide range of operational needs.

The Countertop Stand is well-suited for countertop placement or battery charging, providing a convenient and secure means of positioning the device.

Users can take advantage of the OtterBox® uniVERSE® adaptor for easy sliding and connection to a wide range of mobile devices, including phones and tablets.

DynaFlex II Go offers the option to install a half-rubber sleeve, intended to boost the device's ingress protection when utilizing the OtterBox® uniVERSE® adaptor for DynaFlex II Go.

Downloads, Compliance, & Marketing Materials is where you get the files and formal documentation and product brochures for MagTek devices — firmware images, PCI security policies and certifications, and product marketing materials like brochures and videos. It's the home for the artifacts you download for a specific device, kept out of the developer path so the guides and reference stay focused on integration. Product hubs link here for their device-specific files.

Operation Overview

The operator initiates a transaction from the host, and the cardholder interacts with the device. Transaction types may include retail transactions, new accounts, teller window applications, checking, savings, mortgages, and any other type of transaction where there is interaction between the cardholder and the operator.

For each transaction type, the host software directs the cardholder. The transaction flow on the device may differ depending on what the host software specifies and what the cardholder does. Section 7.9 Card Reading provides examples of the cardholder experience for each type of payment. If the device cannot read payment data, the host software may require the cardholder to repeat the action or require the host to reject the transaction.

Physical Button Operation

All DynaFlex II Go devices have a single physical button, see Figure 6-1 - Power Button. Pressing and holding this button can activate extra functions. To active a specific function, press and hold the button until a specific number of beeps are heard. Table 6-1 - Button Functions contains functions that can be activated. Beep counts that are not listed are not supported.

Table - Button Functions

During operation, DynaFlex II Go devices transition between distinct operating modes, which are important for operators to understand:

• Powered Off Mode is the shipping and storage mode of the device. No external power is applied to the device through the USB cable or from the internal rechargeable battery. In this mode, the device consumes very little power. To set the device from Powered Off mode to Active Mode, connect the device to USB power, or press the power button, see Figure 6-1 - Power Button .

• Active Mode is the device’s normal “awake” state when it is in use. In this mode, the device LED indicators are powered on, and the device is ready to receive commands from the host. For more information on Status LEDs and LED behavior see sections 7.4 About the Status LEDs, 7.5 Bluetooth® Low Energy (LE) LED Behavior, 7.5.7 DynaFlex II Go Bluetooth® Low Energy (LE) Sleep Mode

When in Bluetooth® LE Sleep Mode, DynaFlex II Go will conserve battery life by limiting power to non-essential hardware features and entering low power mode. When in Sleep Mode, the device will appear to be powered off, with no LEDs illuminated, see Figure 7-15 – Bluetooth® (LE) Sleep Mode. For information on how to disable this feature, see D998200597 DynaFlex II Go Programmer’s Manual (COMMANDS).

Figure – Bluetooth® (LE) Sleep Mode

• LED Behavior: Successful Transactions, and 7.7 LED Behavior: Errors, Timeouts, and Canceled Transactions. To set the device from Active mode to Powered Off mode remove power press and hold the power button for two beeps.

• BLE Sleep Mode is a standard feature that conserves battery life by limiting power to non-essential hardware features. When in Sleep Mode, the device will appear to be powered off, with no LEDs illuminated, see 7.5.7 DynaFlex II Go Bluetooth® Low Energy (LE) Sleep Mode, for more information on BLE Sleep Mode.

DynaFlex II Go products have a beeper that provides feedback to operators and cardholders about the internal state of the device:

• The device sounds one short beep after it has successfully read a contactless tap, and the cardholder can safely remove the card or device from the contactless landing zone.

• The device emits two beeps when reading a card or contactless payment device to indicate a card read error occurred.

• The device sounds two beeps when an operator cancels a pending EMV transaction. The device provides an internal setting the host can use to adjust the global system volume. The device does not provide an interface to change the volume setting directly via buttons. If the device is too quiet or too loud:

To play a sequence of tones, follow these steps:

• Make sure the device is in idle state.

• Send an audio command to the device to play a sequence of tones. For details, see D998200597 DynaFlex II Go Programmer’s Manual (COMMANDS).

The guidelines in the following sections are intended to help project planners and system administrators plan for the physical and logical requirements of deploying and using DynaFlex II Go products. The most effective way to ensure smooth deployment of a solution is to consider these factors before receiving the device.

Logistical Planning

• Determine what type of host DynaFlex II Go will connect to. For a list of supported device types and operating systems, see Table - Available Models and Options. When planning, be sure to include any additional support or devices required by the host and DynaFlex II Go, such as physical locations, mounting, power connections, and charging cradles.

• Determine what connection the host will use to communicate with the device. The available connections are USB-C for power and control and Bluetooth® Low Energy (LE) for wireless connectivity (see Table - Available Models and Options).

• Determine what software will be installed on the host and how it will be configured. Software can include the operating system, transaction processing software, security software, and so on. If teams other than the software development team will be involved in preliminary device testing, MagTek recommends the solution development team provide a smoke test harness early in the development process to allow basic testing (for example, communication adapter testing). In addition, be sure to plan for any additional support required by the software, such as software licenses and network connections. Information about software is provided in section 4.2 About Host Software.

• Determine how the device will be physically presented to the cardholder. If the device is mounted, make sure there is adequate clearance for cardholders to swipe, insert, and tap. If the solution design includes metal objects anywhere near the device, including metal enclosures, make sure that at all points the metal is no closer than 15mm from the MSR swipe path or card insertion slot. Proximity to metal can adversely affect the device’s performance.

• Determine how the device should be configured and specify that configuration when ordering the device. A full list of configurable options is documented in D998200597 DynaFlex II Go Programmer’s Manual (COMMANDS).

• Select and configure a secure workstation that advanced operators will use to configure and/or update the device. The workstation must be configured as follows:

  • Available USB port.

  • A secure means of obtaining files, either via the network (such as SFTP) or via removable media, such as USB flash drives. This is required for installing software tools, copying firmware files, etc. If you are using Magensa Services, make sure the secure workstation has an internet connection and has all the required Magensa Remote Services software components installed.
• Determine the final set of tools advanced operators will use to configure, test, and update the device. This documentation uses the 1000007406 DynaFlex, DynaProx Test Utility as an example for configuring the device; it can be used for initial pre-deployment testing and development, and as sample code showing how to communicate with the device, but the full solution may call for customized, solution-specific software for configuring the device and updating firmware.

• Determine how to inspect devices upon arrival, upon installation, and periodically during live usage, to ensure malicious individuals have not tampered with them. Details about inspection are provided in section 4.1 About Inspection.

• Develop procedures for maintaining the device(s). Detailed guidance is provided in section 8 Maintenance.

• Determine how to train operators. For example, training may include information extracted from section 5 Configuration, section 6 Operation, and section 8 Maintenance.

• Review the device’s PCI Security Policy, posted to the PCI web site under Approved PIN Transaction Security (PTS) Devices, for additional information about using the device securely.

This document addresses the proper use of the DynaFlex II Go family of secure card readers (SCR) in a secure manner. This includes information about key-management responsibilities, administrative responsibilities, device functionality, identification, and environmental requirements.

Document Number: D998200595-126

REGISTERED TO ISO 9001:2015

INFORMATION IN THIS PUBLICATION IS SUBJECT TO CHANGE WITHOUT NOTICE. MAGTEK CANNOT BE HELD LIABLE FOR ANY USE OF THE CONTENTS OF THIS DOCUMENT. ANY CHANGES OR IMPROVEMENTS MADE TO THIS PRODUCT WILL BE INCLUDED IN THE NEXT PUBLICATION RELEASE. IF YOU HAVE QUESTIONS ABOUT SPECIFIC FEATURES AND FUNCTIONS OR WHEN THEY WILL BECOME AVAILABLE, PLEASE CONTACT YOUR MAGTEK REPRESENTATIVE.

MagTek®, MagnePrint®, and MagneSafe® are registered trademarks of MagTek, Inc. Magensa™ is a trademark of MagTek, Inc.

AAMVA™ is a trademark of AAMVA.

ANSI®, the ANSI logo, and numerous other identifiers containing "ANSI" are registered trademarks, service marks, and accreditation marks of the American National Standards Institute (ANSI).

ISO® is a registered trademark of the International Organization for Standardization.

PCI Security Standards Council® is a registered trademark of the PCI Security Standards Council, LLC.

EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere. The EMV trademark is owned by EMVCo, LLC. The Contactless Indicator mark, consisting of four graduating arcs, is a trademark owned by and used with permission of EMVCo, LLC.

Google Play™ store, Google Wallet™ payment service, and Android™ platform are trademarks of Google LLC.

Apple Pay®, Apple Wallet®, iPhone®, iPod®, Mac®, and OS X® are registered trademarks of Apple Inc., registered in the U.S. and other countries. iPad™ is a trademark of Apple. Inc. App Store^SM is a service mark of Apple Inc., registered in the U.S. and other countries. Apple and MFi are registered trademarks of Apple Inc. IOS is a trademark or registered trademark of Cisco in the U.S. and other countries and is used by Apple Inc. under license.

The OtterBox® and uniVERSE® trademarks are property of Otter Products, LLC, registered in the U.S. and other countries.

MIFARE®, MIFARE Classic ®, and MIFARE® DESFire®, are registered trademarks of NXP Semiconductors Austria GmbH Styria, All rights reserved.

The Bluetooth® word mark, logos, and Bluetooth® Low Energy (LE) are registered trademarks owned by Bluetooth® SIG, Inc.

Microsoft®, Windows®, and .NET® are registered trademarks of Microsoft Corporation. All other system names and product names are the property of their respective owners.

Initial Inspection

After receiving the device, the customer should visually inspect the product as follows:

• Inspect the label found on the back of the device (see section 2.3.1 Hardware Identification) and make sure the label is not missing, obscured, or modified.

• Check the PCI Hardware Identifier on the device label and make sure it matches the Hardware # listed for the device on the PCI website for Approved Devices. Go to the PCI compliance web page and search for MagTek, and find the product name, iDynamo 5 Gen III. Compare the Hardware ID and Firmware ID: https://www.pcisecuritystandards.org/assessors_and_solutions/pin_transaction_devices

• Check the Device serial number (SN) and make sure it matches with labels on shipping materials and documentation.

• Visually inspect the device, per [2], which is included in the package with each device. See section 4.1 Periodic Inspection for more information regarding visual inspection of the device.

• Follow the steps in Firmware Identification to view the PCI firmware versions installed on the device. Make sure this matches one of the Firmware # values listed on the PCI web site for iDynamo 5 Gen III.

Connect the device to a host via USB-C for control and power. iDynamo 5 Gen III products are designed to provide flexible mounting options such as:

• External clip

• Embedded lanyard

See the device installation and operation manual for more information on how to handle and operate the device, [1].

The specified environmental conditions to operate and store the device are:

• Operating temperature range: 32°F to 95°F (0°C to 35°C) 5-90% RH with no condensation.

• Storage temperature range: -4°F to 113°F (-20°C to 45°C) 10-90% RH with no condensation.

• Power Supply: DC 5.0 V/1.0A

Any temperature or operating voltage outside the values listed above will trigger environmental security protections, resulting in a tamper condition. The device will need to be returned to the factory for inspection before this condition can be cleared.

iDynamo 5 Gen III products support a USB-C interface using the USB-HID protocol. Transactions, configuration, firmware updates, and key injection can all be performed using this interface type. Use of any method not listed in this security policy will invalidate the device’s PCI PTS approval.

iDynamo 5 Gen III products ship from the factory fully secure. The devices have no configuration settings that require modification by the user to meet PCI security requirements.

Custom host software uses the same underlying device command set for all DynaFlex II Go product connection types. This section provides high-level information about communicating with the device via the various physical connection types in various software development frameworks, and provides pointers to available SDKs, which include sample code. Product documentation and SDKs are available for download by searching for the product name on www.magtek.com and navigating to the tab.

MagTek provides convenient SDKs and corresponding documentation for many programming languages and operating systems. The API libraries included in the SDKs wrap the details of the connection in an interface that conceptually parallels the device’s internal operation, freeing software developers to focus on the business logic, without having to deal with the complexities of platform APIs for connecting to the various available connection types, communicating using the various available protocols, and parsing the various available data formats. Information about using MagTek wrapper APIs is available in separate documentation, including:

• D998200380 MagTek Universal SDK Programmer’s Manual (Microsoft .NET)

• D998200381 MagTek Universal SDK Programmer’s Manual (Microsoft C++ )

• D998200385 MagTek Universal SDK for MMS Devices Programmer’s Manual (Java)

• D998200386 MagTek Universal SDK for MMS Devices Programmer’s Manual (iOS)

• D998200387 MagTek Universal SDK Programmer’s Manual (Android)

The documentation is bundled with the SDKs themselves, which include:

· 1000007351 MagTek Universal SDK for MMS Devices (Windows)

· 1000007352 MagTek Universal SDK for MMS Devices (Android)

The SDKs and corresponding documentation include:

• Functions for sending the direct commands described in this manual

• Wrappers for commonly used commands that further simplify development

• Sample source code to demonstrate how to communicate with the device using the direct commands described in this manual

To download the SDKs and documentation, search for “SDK” and select the SDK and documentation for the programming languages and platforms you need or contact MagTek Support Services for assistance.

In addition to the SDK API libraries, software developers also have the option to revert to direct communication with the device using libraries using the operating system’s native USB and serial port libraries. For example, custom software written in Visual Basic or Visual C++ may make API calls to the standard Windows USB HID driver. For more information about sending commands directly, see D998200597 DynaFlex II Go Programmer’s Manual (COMMANDS).

For more information about developing custom applications that integrate with DynaFlex II Go, see the MagTek web site or contact your reseller or MagTek Support Services.

Product Catalogs

This section holds compliance, security, and standards documentation that spans the product line — the cross-product references that apply regardless of which device you're integrating, such as magnetic-stripe (ANSI/ISO) card data standards, EMV specifications, and general PCI and regulatory guidance. For a specific device's security policy and certifications, see that product's Compliance page under Products.

Compliance Documents

This section contains information on DynaFlex II Go's LEDs, beeper, and BCR status LED. It is important to note that DynaFlex II Go devices are equipped with an optional rechargeable battery. If there is no power supply to the device through the USB cable or optional internal rechargeable battery, all LEDs, along with the BCR status LED, will not illuminate. When this occurs, the user interface will resemble the device as shown in Figure 7-1.

As mentioned in section 1.1 Key Features and Components, DynaFlex II Go models equipped with a barcode reader (BCR) have a similar physical appearance as models without a BCR, as shown in Figure 7-1. BCR models are equipped with a camera and a QR code located on the front side of the device.

• DynaFlex II Go devices have a user interface composed of three elements: a visual indicator consisting of four LEDs, a beeper that produces audible alerts, and a power button see Figure 6-1 - Power Button.

• DynaFlex II Go BCR devices have a user interface composed of four elements: a visual indicator consisting of four LEDs, a barcode reader status LED, a beeper that produces audible alerts, and a power button see Figure 6-1 - Power Button.

• DynaFlex II Go devices do not feature input components such as touch screens.

Figure – DynaFlex II Go and DynaFlex II Go BCR

• ISO 7810, ISO 7811, AAMVA

• ISO/IEC 7816-1, 2, 3, & 4 Identification Cards Integrated Circuits with Contacts

• EMV ICC Specifications for Payment Systems Version 4.3d, L1 Contact and Version 4.4a, L2 Contact EMV Contactless Level 1 Version 3.1a

This compliance documentation page provides the essential security and inspection guides required to maintain PCI PTS approval and ensure the physical integrity of iDynamo 5 Gen III secure card readers before and after deployment.

With a sufficiently charged battery, the device will power on when the power button is pressed (see Figure 6-1 - Power Button). The device will also power on when connected to USB power. In USB mode the device will remain in full power mode to provide power to device. If a power-off sequence is initiated, the device will reboot and remain in full power mode.

DynaFlex II Go products have an optional rechargeable battery to supply their own power when they are not powered through the USB-C port. The battery must be periodically recharged by connecting the device to a USB port or stand-alone USB charger. The device requires a USB power supply that can provide at least 500mA @ 5V.

To charge the device, connect it to a USB-C charger or a USB host as described in section 4.3.1 How to Connect DynaFlex II Go to a Host Computer via USB-C. For best results, use the cable that is included with the device. When charging, make sure the device is receiving enough power from the USB connection (the battery level should increase even when the device is in use). A full recharge cycle for a completely drained battery depends on the charging method. From a host USB port at 500mA, full charge takes approximately 5 hours. From a dedicated wall charger, a full charge may take approximately 5 hours. After connecting the device to a power source, make sure the LEDs indicate the device is charging (see sec - How to Connect DynaFlex II Go to a Host Computer via USB-C)

For important information about the device’s power systems, optimal charging methods during regular use, optimal handling and storage, and other information about keeping the device’s power systems in the best possible condition, see section - Handling to Avoid Accidental Tamper and section About Power.

This document addresses the proper use of the DynaFlex II Go family of secure card readers (SCR) in a secure manner. This includes information about key-management responsibilities, administrative responsibilities, device functionality, identification, and environmental requirements.

The use of this secure card reader in any method not described in this security policy will invalidate the PCI PTS POI v6.2 approval of the device.

Throughout this document:

• DynaFlex II Go products refers to all products in the DynaFlex II Go product family, including DynaFlex II Go models equipped with a barcode reader (BCR) and Bluetooth LE connectivity.

Periodic cleaning of the device’s exterior may be required. To clean the outside of DynaFlex II Go products, wipe down the device with a soft, slightly damp cloth and then wipe dry with a lint-free cloth. The graphic overlay on the face of the device can also be cleaned using a slightly damp specialty cleaning cloth, like those used to wipe lenses, monitors, and smartphone displays.

In addition to the security guidance in the product manuals, MagTek may provide updates to this document, as well as supplemental security guidance or notices regarding vulnerabilities, at MagTek advises checking the product’s home page periodically for the most up-to-date information.

Any firmware updates addressing product features, bugs, or security vulnerabilities are also posted to or may be sent directly to affected customers. To update the device’s firmware:

• Obtain the firmware image to install from your MagTek representative.

The following documents may be used to provide additional details about the device and this security policy:

• DynaFlex II Go Installation and Operation Manual

• DynaFlex II Go Programmer’s Manual (COMMANDS)

• DynaFlex II Go Device Inspection Document

• DynaFlex II Go Package Inspection Document

• NIST SP 800-57-1 Recommendation for Key Management

• ANS X9.24 Part 3:2017, Retail Financial Services Symmetric Key Management, Part 3: Derived Unique Key Per Transaction Using Symmetric Techniques

• X9 TR-31:2010, Interoperable Secure Key Exchange Key Block Specification for Symmetric Algorithms

Periodic Inspection

The merchant or acquirer should inspect the appearance of secure card reader on a daily basis:

• Inspect the appearance of secure card reader to make sure it is the right product.

• Inspect whether the Swipe Path has an additional card reader or other inserted bugs, See Figure 4-1, below.

• Inspect whether the product appearance has been changed.

• Check if the firmware version is correct.

• After connecting the device to a USB-C power supply, it will power on, the LED indicator should illuminate green and remain powered on to indicate the device is in an idle state, ready for a transaction. Powering on the secure card reader will test hardware security and authenticity, and the integrity of the installed firmware.

MSR Swipe Path: The swipe path is smooth. The only moving part is the spring-mounted read head that depresses into the device as the card’s magnetic stripe makes contact with the read head.

Figure 4-1 - Card Swipe Path Example

MagTek strongly recommends performing security inspections on a regular schedule. Additional information can be found in [2]. If any problems are detected, stop using the device, set it aside in a secure location, and contact the manufacturer or your acquirer for further advice.

iDynamo 5 Gen III performs self-tests at power-up and after reset. The device automatically resets and performs self-tests every 24 hours at the configured time of day. No manual intervention by the operator is required. Self-tests include:

• Checking the integrity and authenticity of the firmware and cryptographic keys.

• Checking security mechanisms for signs of tampering.

The secure card reader has no functionality that gives access to security-sensitive services based on roles. Such services are managed through dedicated tools, using cryptographic authentication.

iDynamo 5 Gen III products ship from the factory fully secure. The devices have no security related default values (e.g., passwords/authentication codes/certificates) that require modification by the user to meet PCI security requirements.

If the device senses a physical or environmental attack, it erases all sensitive keys and will have limited functionality. While powered on, the SCR indicates it is in a tampered state by illuminating its only LED solid red, as seen in Figure 4-2 Tamper Response. If this occurs:

• Remove the device from service immediately.

• Store it securely for a possible forensics investigation.

• Contact the manufacturer for assistance. The device will likely need to be returned to the manufacturer for diagnosis and servicing.

Figure 4-2 Tamper Response

iDynamo 5 Gen III products support file-based updates of the device’s core firmware (main firmware) and authorized commands for updating sensitive configuration. For optimal device security, MagTek recommends the latest versions of firmware should always be installed.

Firmware updates are provided as files that have been signed by MagTek. The firmware files can be loaded locally through the USB-C interface by using update tools available from the MagTek web site. The device verifies each update is newer than the installed version, and cryptographically authenticates the file with RSA-2048 and SHA-256. If version checking or authentication fails, the device erases the update file and reports an error to the host.

Before iDynamo 5 Gen III products are permanently removed from service, all the keys and sensitive data must be erased. One way to accomplish this is by temporarily removing the back cover, which forces a tamper response.

If removal from service is only temporary, no action is required. All sensitive data will continue to be protected by the device’s physical and logical protection mechanisms.

The merchant or acquirer should daily check the appearance of secure card reader:

• Inspect the appearance of secure card reader to make sure it is the right product.

• Inspect whether the Swipe Path has an additional card reader or other inserted bugs, See Figure 4‑1, below.

Barcode symbology refers to the way in which data is encoded in a barcode. It uses either spaced lines, dots, or squares. When read, these symbols are decoded and converted to data. The table below lists all of the supported symbologies and which are enabled by default.

This compliance documentation page provides the essential security and inspection guides required to ensure the physical integrity of DynaFlex II Go secure card readers before and after deployment.

This document addresses the proper use of iDynamo 5 Gen III secure card readers (SCR), in a secure manner. This includes information about key-management responsibilities, administrative responsibilities, device functionality, identification, and environmental requirements.

The use of this secure card reader in any method not described in this security policy will invalidate the PCI PTS POI v6.2 approval of the device.

Throughout this document:

• iDynamo 5 Gen III refers to all products in the iDynamo 5 Gen III product family.

Installing DynaFlex II Go products is straightforward: The manufacturer or acquirer, configures the preferred settings, keys, terminal, and payment brand settings before deployment; end users need only set up a host with appropriate software, configure the software, and connect the device to the host. This section provides general information about inspecting, connecting, and installing DynaFlex II Go products.

About Inspection

Before unpacking the device, it is important to inspect its secure packaging to make sure it has not been tampered with in storage or in transit. MagTek provides details for inspecting the integrity of the device’s secure packaging in D998200594 DynaFlex II Go Package Inspection Document.

It is important to thoroughly inspect a new device before deployment, and regularly inspect devices in live usage (including its immediate surroundings) to make sure malicious individuals have not tampered with it. MagTek recommends conducting inspection training for all device operators, and an inspection schedule with checkpoints in place to make sure operators are performing inspections as specified and as scheduled. MagTek provides an easy-to-follow device inspection reference D998200593 DynaFlex II Go Device Inspection Document.

About Host Software

DynaFlex II Go products do not have a display. In any solution, DynaFlex II Go must be connected to a host, which must have software installed that can communicate with the device and is capable of processing transactions. To set up the host to work with DynaFlex II Go, follow the installation and configuration instructions provided by the vendor of the host or the host software. For information about developing custom host software, see section 9 Developing Custom Software.

The following sections describe how to connect DynaFlex II Go to a host using the available USB-C receptacle or Bluetooth® Low Energy (LE) connections.

Figure - Connecting to a Host via USB-C

To connect DynaFlex II Go products to a USB host computer or charger using the USB-C port, follow these steps (for reference see Figure 4-1):For best results, use the cable that is included with the device or another cable from Table 1-2 - DynaFlex II Go Accessories on page 9. Connect the USB-C end of the cable to DynaFlex II Go see Figure 4-1 - Connecting to a Host via USB-C.

• Connect the other end of the USB cable to the host’s USB port.

• As soon as the device starts receiving power through USB, it automatically powers on.

• If the specific device serial number you are connecting has not been previously connected to the host, the Windows system tray on the host reports it is setting up a device.

Figure – Setup Complete

Figure – Windows Device Manager

Figure – HID Compliant Vendor-defined Device Properties

• The operating system may put the device into USB Suspend mode.

To connect DynaFlex II Go via Bluetooth® LE to an iOS device, refer to section 9 Developing Custom Software and D998200386 MagTek Universal SDK for MMS Devices Programmer's Manual ( iOS ).

1.1.2 How to Connect DynaFlex II Go to an Android Host via Bluetooth® Low Energy (LE)

To connect DynaFlex II Go to an Android host that supports Bluetooth® Low Energy (LE):

• If any Bluetooth® Low Energy (LE) host software has an active data connection to the device, close the connection.

• On the Android host, install and configure the host software you intend to use with DynaFlex II Go. If you do not yet have that software, you can download a test tool from the Google Play store called MTUSDK Demo , published by MagTek, Inc. .

• Make sure the DynaFlex II Go output connection is configured to transmit card data over Bluetooth® LE. This is the factory default.

To unpair from the device, follow these steps:

• Locate the device in the Bluetooth configuration page.

• Press the settings (gear) icon.

• Press the Forget button and make sure the device disappears from the disappears from the Paired Devices list.

To connect DynaFlex II Go to a host with Windows 10 version 1703 or above, and Bluetooth® 4.0 or higher hardware that supports Bluetooth® Low Energy (LE), follow these steps:

• Make sure the host’s Bluetooth® LE interface is turned on and working correctly.

• If any Bluetooth® Low Energy LE host software has an active data connection to the device, close the connection.

• On the host, install and configure the software you intend to use with DynaFlex II Go (if you do not yet have that software, you can use 1000007351 MagTek Universal SDK for MMS Devices (Windows) available from MagTek.com, to perform simple tests):

DynaFlex II Go products are designed to provide flexible mounting options:

• The device can be mounted to the host via external clip or embedded lanyard.

This section provides information and guidelines for designing the mechanical aspects of a solution that incorporates DynaFlex II Go products. MagTek strongly recommends vetting and testing solution designs before finalizing and deploying them, to make sure the design meets all requirements (e.g., functional, legal, security, certification, safety, and so on).

When designing the mechanical portions of a solution that incorporates DynaFlex II Go products, consider the following:

• Review section 1.1 Key Features and Components for an overall introduction to the device’s physical features and what they are called.

• Review Appendix A Technical Specifications.

• Review the information below about overall device dimensions and mounting hole locations and use.

Overall dimensions of the device are shown in the below Figure. On request, MagTek can provide a 3D model of the device’s envelope to assist with the mechanical portion of solution design. MagTek strongly recommends building and testing prototypes with actual devices before finalizing the solution design.

Figure 4-5 - DynaFlex II Go Overall Dimensions

When designing an enclosure or mounting bracket, make sure there is adequate clearance for cardholders to tap or users to present a bar code. Proximity to metal can reduce the device’s reading range.

DynaFlex II Go provides four LEDs (see section 7.1 Component Details), numbered LED1 through LED4, which report the device’s current operating status.

• The meaning of each LED depends on the device’s operating mode, see section 6 Operation. Most of the time, operators will check the device’s status using the LEDs when it is in Active Mode while the device is not performing a transaction.

• LED blinking patterns have specific meanings as described in Table 7-. A blinking LED generally means the device is actively doing something to change the state that the LED is indicating, and solid indicates a persistent state that would require an operator or cardholder to take action to change. One major exception is a device-wide functional failure state, such as a tamper state, where all LEDs flash urgently to call the attention of an advanced operator to intervene.

In this manual, specific blinking patterns are described in more detail in the sections where they are relevant. For example, information about how the LEDs show the device’s connection status is in section Connecting DynaFlex II Go to a Host.

Handling to Avoid Damage

Upon receiving the device, inspect it to make sure it originated from an authentic source and has not been tampered with. For details, see D998200593 DynaFlex II Go Device Inspection Document, available from MagTek.

From device delivery through assembly, shipping, installation, usage, and maintenance, the device must not be exposed to conditions outside the ratings in Appendix A Technical Specifications.

If the device is exposed to cold temperatures, adjust it to warmer temperatures gradually to avoid condensation, which can interfere with the operation of the device or cause permanent damage. Do not drop or shake the device.

For information about ongoing maintenance of the device, such as cleaning, see section 8 Maintenance.

Handling to Avoid Accidental Tamper

DynaFlex II Go products implement active tamper detection, which uses a small amount of electricity even when the device is completely powered off. When unpowered by an external power supply, the device powers its active tamper detection circuitry using its non-rechargeable internal backup battery. This provides 5 years of backup shelf life across the entire life of the device. If the backup battery is allowed to completely discharge, the device’s tamper detection engages and locks down the device, and it must be returned to the manufacturer to reset.

To avoid accidental tamper events and to optimally condition the battery, follow these precautions:

• Temperature is the most critical factor in extending battery life and preserving battery charge. Store the device at the lowest reasonable temperatures within its specified storage temperature range (see Appendix A Technical Specifications). Storing at temperatures between -4°F to 113°F (-20°C to 45°C).

• Do not drop or shake the device.

• Do not attempt to disassemble the device.

The following documents may be used to provide additional details about the device and this security policy:

• MagTek iDynamo 5 Gen III Installation and Operation Manual PN: D998200614

• MagTek iDynamo 5 Gen III SRED, Device Inspection Manual PN: D998200620

• MagTek iDynamo 5 Gen III Programmer’s Manual COMMANDS PN: D998200587

• NIST SP 800-57-1 Recommendation for Key Management

• ANS X9.24 Part 3:2017, Retail Financial Services Symmetric Key Management, Part 3: Derived Unique Key Per Transaction Using Symmetric Techniques

• X9 TR-31:2010, Interoperable Secure Key Exchange Key Block Specification for Symmetric Algorithms

• X9.143 (TR-31) Symmetric Key

The device does not have an on-screen configuration interface. However, it does have settings the host can change using commands. These settings are documented as Properties in D998200597 DynaFlex II Go Programmer’s Manual (COMMANDS).

For all tDynamo (Gen I, II) documentation, including programmer’s manuals, the technical reference manual, software/SDKs, and warranty info, please visit the official tDynamo (Gen I, II) Support Page:

tDynamo (Gen I, II) Support

For more help

For allDynaPAD documentation, including programmer’s manuals, the technical reference manual, software/SDKs, and warranty info, please visit the official DynaPAD Support Page:

DynaPAD Support

For more help

For all Excella documentation, including programmer’s manuals, the technical reference manual, software/SDKs, and warranty info, please visit the official Excella Support Page:

Excella Support

For more help

When DynaFlex II Go is connected via USB in an idle state, it can be detected by a host through the USB HID port see Figure 7-6. After the host has connected to DynaFlex II Go, LED 1 will stay on. The device is in Ready State.

Figure - LED Status (Idle State) Before Host Detection and LED Status (USB Ready State) After Connecting to Host

For all iDynamo 5 (Gen I,II) documentation, including programmer’s manuals, the technical reference manual, software/SDKs, and warranty info, please visit the official iDynamo 5 (Gen I,II) Support Page:

For all DynaMag documentation, including programmer’s manuals, the technical reference manual, software/SDKs, and warranty info, please visit the official DynaMag Support Page:

The arrangement of the four LED indicators on DynaFlex II Go devices is illustrated in Figure 7-2. The LEDs are designated 1 to 4 and are ordered from left to right on the device.

Figure - LED Ordering

When DynaFlex II Go is powered on, its LEDs will illuminate green, when it is powered off, the LEDs will remain unlit.

The figure below illustrates the On/Off status of the LEDs.

Figure - LED ON/OFF

DynaFlex II Go devices equipped with a bar code reader have a status LED that indicates whether the barcode feature is scanning.

For all ImageSafe documentation, including programmer’s manuals, the technical reference manual, software/SDKs, and warranty info, please visit the official ImageSafe Support Page:

ImageSafe Support

For more help

For all Excella STX documentation, including programmer’s manuals, the technical reference manual, software/SDKs, and warranty info, please visit the official Excella STXt Page:

Excella STX Support

For more help

For all eDynamo documentation, including programmer’s manuals, the technical reference manual, software/SDKs, and warranty info, please visit the official eDynamo Support Page:

eDynamo Support

For more help

The DynaProx is a next-generation, EMV Contactless, and NFC Contactless reader from MagTek, designed for original equipment manufacturers (OEMs) and developers building secure payment, access control, and identification solutions. It combines the controller and antenna in a small form-factor, and is available in two models: the standard DynaProx for EMV Contactless, and NFC transactions, and the DynaProx BCR which includes a camera for reading 1D/2D barcodes. The device is engineered with the MagneSafe® Security Architecture, meeting requirements for contactless EMV 3.0 and PCI PTS POI 6.x, and supports triple DEA and AES-256 encryption with DUKPT key management to safeguard sensitive payment data.

Beyond payments, DynaProx supports MIFARE® technology for access control, as well as Apple® VAS and Google SmartTap for mobile wallet protocols supporting event ticketing and loyalty programs. Ruggedized for unattended environments, it features IK08 impact resistance and IP66 water ingress protection, making it ideal for kiosks, vending machines, car washes, gas pumps, and countertop deployments with an optional stand. The device connects via USB, USB iAP2, or RS-232 interfaces, and is compatible with Windows, Linux, Android, and iOS applications. DynaProx is also ready for use with Magensa L3 certified gateway services. The official MagTek DynaProx support page is a central hub containing all the resources you'll need. There you can find product brochures, programmer's manuals for the MMS implementation, developer guides (including for EMV Common Kernel and L3 certification), a product catalog, and a comprehensive FAQ section with instructional videos.

DynaProx Support

Welcome to the resource hub for the MagTek Virtual Reader iOS SDK, a software-only solution that enables merchants to accept all forms of contactless payments, including contactless credit and debit cards, Apple Pay, and other digital wallets, using only an iPhone and a supporting iOS app, no additional hardware or payment terminal needed. This section provides all the documentation, software, and developer tools needed to successfully integrate, manage, and support Tap to Pay on iPhone within your mobile payment applications.

MagTek Virtual Reader iOS SDK

This universal compliance and security documentation page provides the essential security and inspection guides required to maintain and ensure the physical integrity of MagTek products before and after deployment.

Product-specific Compliance Documents

For more help

DynaFlex II Go will power on immediately when connected to USB power. A brief beep will sound, and all four LEDs will turn on for half a second, as shown in the Figure below. Following this, LED 1 and LED 2 will remain illuminated, while LED 3 and LED 4 will remain unlit.

Figure – LED Power on Sequence – USB Power On

The DynaFlex II Go is a PCI PTS v6.x certified Secure Card Reader Authenticator (SCRA) from MagTek, designed for mobility without compromising security. It features a compact, low-profile design and is ready to accept a wide range of payment types, including tap (contactless/NFC mobile wallets like Apple Pay, Google Pay, and Samsung Pay), swipe (magnetic stripe), and dip (EMV chip cards). The optional BCR model adds the ability to scan both 1D and 2D barcodes, and it also supports reading and writing non-payment NFC data for use in access control, loyalty, and transit ticketing applications.

The device offers flexible connectivity via USB-C or Bluetooth® LE, works across Windows, Android, and iOS hosts, and is backed by MagTek’s MagneSafe® Security Architecture, including AES encryption and DUKPT key management. The official MagTek DynaFlex II Go support page is a central hub containing all the resources you'll need. There you can find product brochures, compliance documentation (including device and package inspection guides), programmer’s manuals, SDKs, a comprehensive FAQ section, and instructional videos.

This page provides comprehensive documentation for MagTek's MICR check readers and scanners, including installation and operation manuals, programmer's guides, software utilities, and compliance documentation to support check processing in financial institutions, retail locations, and remote deposit capture applications.

This product-compliance compliance documentation page provides the essential compliance and security documentation required to ensure the integrity of specifc secure card readers before and after deployment.

This page provides an overview of MagneSafe V5 Secure Card Reader Authenticators (SCRA), a family of encrypted card-reading devices that use MagnePrint® technology, strong encryption, and mutual authentication to securely capture, authenticate, and transmit cardholder data for payment and identity applications.

For all DynaWave documentation, including programmer’s manuals, the technical reference manual, software/SDKs, and warranty info, please visit the official DynaWave Support Page:

Welcome to the resource hub for the Tap to Pay on iPhone API, a software-based solution that transforms a compatible iPhone into a secure contactless payment terminal. Leveraging the iPhone’s built-in NFC technology, it allows merchants to accept all forms of in-person contactless payments, including physical debit and credit cards, Apple Pay, and other digital wallets, without any additional hardware. Available through the MagTek Virtual Reader iOS SDK, this API is designed for developers to integrate directly into their own payment applications. This section provides all the documentation, software, and developer tools needed to successfully integrate, manage, and support the Tap to Pay on iPhone API within your iOS ecosystem.

The Device Manuals page is where you will find documentation and instructions for product-specific functions including installation and operational manuals.