Skip to main content
  Sign in

Quick Steps

Labels

UTG

Article

Universal Transaction Gateway

Operational

Still Have Questions? Submit a Request

Or Call (888) 857-9751.

Or Call (888) 276-2108.

Generate Certificate for Kioware on Universal Transaction Gateway

Catherine Harper
  1. Shift4 Payments
  2. Self Help Product Categories
  3. Universal Transaction Gateway (UTG)
  4. Shift4 SSL\TLS Certificate Generator

Description: Kioware for Windows uses the REST interface; thus, we need to create a certificate for it to function properly. 

S4_Certificate_Generator__1_.png

  1. Run the Shift4 Certificate Generator.
  2. Set the Common Name to the IP address of the UTG Computer OR the loopback address of 127.0.0.1 provided Kioware and UTG are installed on the same computer.
  3. Set the Organization to the DBA NAME.
  4. Set the Email Address to be an email the customer can access.
  5. Set the Locality to be the site's city.
  6. Set the State to the site's full state name.
  7. Set the Country to US.
  8. Set the DNS tab to https://ip address of UTG computer or https://127.0.0.1 provided Kioware and UTG are installed on the same computer.
  9. Set the Serial Number to the Shift4 serial number.
  10. Set the Cert Type to CRT.
  11. In the Certificate Generation Options checkmark the SelfSigned box, leaving CA SelfSign and CA Intermediate unchecked.
  12. Make sure Embed Key is UNCHECKED.
  13. Key Size 4096 bit.
  14. Server Authentication UNCHECKED
  15. Client Authentication UNCHECKED.
  16. Password should be set to something easily remembered like the Zip Code of the site.
  17. Click Generate.
  18. Save it in the Shift4 folder.
  19. You will see both a .CRT and a .KEY file saved in that directory now:

S4_Certificate_-_Directory__1_.png

  1. Once the certificate and key file have been generated, they will need to be installed inside the API thread in the UTG Tune Up:
    S4_Certificate_-_API_thread__1_.png
    • Make sure to input the correct (and identical) password in both Password boxes (this should be the password used when generating the certificate initially i.e. zip code).
  2. Select OK and Save the Tune up.
  3. After this has been generated and installed in the UTG, this also needs to be installed in the Trusted
    Root Certification Authorities of all Windows computers that will be using a PIN Pad. Please see Installing UTG Certificates in Windows 7/10.
Top