IM300-IM500-IM700 Maintenance Manuals20200425
IM300-IM500-IM700 Maintenance Manuals20200425
Contents
I. Introduction...........................................................................2
II. Specification...........................................................................3
III.Software synopsis...................................................................4
I. Introduction
The IM Series from PAX is ideal for self-service sales points such as petroleum
forecourts, car parks, kiosk & vending machines, as well as transit & ticketing
environments.
Engineered to the highest design & quality standards, the IM Series offer the latest
in PCI, EMV and other industrycertifications.
These IM modules install easily in conventional aperture sizes and offer intra-
module encryption and multiple connectivity options.
Easy Integration
Cut out compatible to EVA standards
Weather resistant for outdoor use
Standard USB connectivity
IK10 vandal resistant
Plug-and-play
II. Specification
Specification Model IM300 IM500 IM700
Processor CPU ARMA9, 1GHz ARM A7, 500MHz ARM A7, 500MHz
OS Prolin
Memory Flash / SDRAM 512 / 512 128 / 256 128 / 256
Triple track MSR / EMV L1 & L2
Card Readers
ISO 14443, 13.56MHz, Type A / B
2.8 inch 320 x
Display TFT Color display
240 pixels
Numeric keys / Function keys 10 / 4 / 2
Keypad
/Navigation keys
Card Slots SAM 3 2 2
Adapter Output 9V ~ 42V DC 5V DC 5V DC
Audio Buzzer
USB Device / RS232 1/4 1/1 1/1
Peripheral Ports USB Host / MDB / LAN / Audio
2/1/1/1
Jack
LAN
Communications 4G / 3G /
Optional
WiFi / Bluetooth
Operating temperature -20°C ~ 70°C -30°C ~ 70°C -30°C ~ 70°C
Environmental Relative humidity 5% ~ 95% 5% ~ 95% 5% ~ 95%
Storage temperature -30°C ~ 70°C -30°C ~ 70°C -30°C ~ 70°C
External dimension (W x H x D
92 x 140 x 32 100 x 68 x 137 82 x 68 x 34
mm)
Mechanical Installation cutout (W x H mm) 82 x 120 73 x 61 72 x 44
Ingress protection IP65 IP34 IP65
Shock protection IK10 IK10 IK10
PCI PTS 5.x, SRED / UL / CE /
Certifications FCC / RoHs
MasterCard TQM
EMV L1 & L2
Picture 3.1
2. TM
Terminal Manager, TM in short, is an App program based on Prolin OS and run
in IM20 terminals .the main menu of TM in IM20 is as following:
Picture 3.2
System Configuration: The entrance of configuration parameters.
Steps: TM –‘Main Menu’ –‘1.System Configuration’ –Enter Password: 123456 ----
1. System setting: System setting, Media, Wifi, XCB Service, COM console, Reset
config, Remote load, Save log, Power saving, USB device mode.
2. Module testCardreaders, User interface, App list
3. Terminal Info;
4. PED: RKI, Cert Init, Cert Info, RKI Version, LKI, KI Link, KI setting.
5. Security Info;
Picture 3.3
Picture 3.4
5 PAX Technology Limited Company
IM Series Unattended Payment Solutions
1. Overall structure
IM300 has two different boards including main board and keypad board.
KEYPAD LCD
BEEP
24MHZ Crystal
STM32
3G MDB
3G antenna
512MB DDR2
RS232 MODULE RJ45
26MHZ crystal 512MB NAND Flash
BT/WIFI
COIN BATTERY
RTC
MINI USB
USB CABLE
HEAT SLAVE
Picture 4.1
2. PCBA board
Main board is the core of the entire system, which includes circuits of CPU,
MEM, Clock, major power supply circuits and security protect module, LCD,
SAM, Wireless module 3G, MDB, RS232, LAN, MIC, Keypad, Beep, USB,
WIFI/BT, Audio and so on.
Main board
The interfaces on main board are as follows:
1. J94, 3PIN, is connected with power cable.
2. J73, 8PIN, is connected with RS232 cable.
3. J74, 8PIN, is connected with RS232 cable.
4. J71, 8PIN, is connected with RS232 cable.
5. J69, 4PIN, is connected with Type-A cable.
6. J70, 5PIN, is connected with Mini USB cable.
7. J81, 5PIN, is connected with earphone.
8. J82, 5PIN, is connected with MIC.
9. J77, 8PIN, is connected with LAN cable.
10. J72, 8PIN, is connected with RS232 cable.
11. J68, 4PIN, is connected with Type-A cable.
12. J78, 6PIN, is connected with MDB cable.
13. J76, 5PIN, is connected with temperature detecting cable.
14. SIM1 15. SAM1 16. SAM2
17. J67, 40PIN, is connected with LCD cable.
Picture 4.2
8 PAX Technology Limited Company
IM Series Unattended Payment Solutions
Picture 4.3
Keyboard
Picture 4.4
3. Chips introduction
3.1 MCU
MCU adopts U1-BCM 58303, Cortex A9 framework, main frequency is 1GHZ.
3.2 Memory
IM300 adopts U3-512MB Flash and U2-512MB DDR.
Picture 4.5
12V power adapter:
Picture 4.6
10 PAX Technology Limited Company
IM Series Unattended Payment Solutions
EXP_POWER_IN to 12V:
Picture 4.7
12V to VCC:
Picture 4.8
VCC to VDD:
Picture 4.9
VCC to 1.8V:
Picture 4.10
VCC to 1.35V:
Picture 4.11
VCC to 1.0V:
Picture 4.12
VDD to SYS_1P0:
Picture 4.13
Coin battery&AON_3P3 to BBL_VBAT:
Picture 4.14
SCR
CR
Heat&Cool
LCD
U28
(SY8120) 3G/4G
5V BEEP 50Ma
U36 U16
9V-24V USB Host 1A
(MP2908A) (SY8120)
RS232, SAM, MIC
U7 1.8V MCU
(ME3103) 95mA
U6 1.35V, MCU,
(ME3103) DDR, 142mA
U9 1.0V, MCU,
(ME3103) 153mA
3.3V
Switch MCU
RTC
Coin battery
Picture 4.15
3.4 MDB
MDB is one kind of protocol for communicating with VMC, the circuit is
similar to serial port but electrical level isn’t consistent, interfaces should be
standard. Considering that BCM58303 serial port is not enough and can’t
support 9 bit serial port either, however, MDB protocol needs 9 bits serial
port. So STM32 method is adopted to communicate with MDB, SPI2
communication port is used between STM32 and BCM58303.
MDB hardware design:
BCM58303
Level
STM32 switching
circuit
Picture 4.16
PIN Function
1. VDC(25V-45V)
2. DC Power return
3. NC
4. Master receive
5. Master transmit
6. Common com
Picture 4.17
Picture 4.18
15 PAX Technology Limited Company
IM Series Unattended Payment Solutions
Picture 4.19
3.5 Clock
BCM58302/3 needs two different referable clocks, 25MHZ and 32.768KHZ
crystals and it takes external crystals and internal oscillating circuits to generate
referable clocks, the 25MHZ clock is used to generate working frequencies for
processor and the whole system, the 32.768KHZ crystal is used for real time
reference and coin battery.
X1:
Picture 4.20
X2:
Picture 4.21
3.6 LCD
IM300 LCD is 2.4 inch and the resolution is 320*420, landscape. The working
voltage of this module is 3.3V, backlight circuits consists of 2 serial and 8 parallel,
the current of each LED is 20Ma and working voltage is 3.2V.
LCD backlight circuit:
Picture 4.22
3.7 Keys
IM300 has 16pcs keys together including numeric keys, cancel key, clear key,
enter key, function key, upturn key and downturn key.
Picture 4.23
Picture 4.24
3.8 LAN
Picture 4.25
18 PAX Technology Limited Company
IM Series Unattended Payment Solutions
Picture 4.26
Speaker
Picture 4.27
3.10 Beep
IM300 can support beep.
Picture 4.28
3.11USB
CPU BCM58303 can 3pcs USB2.0 ports, port 2 can support OTG, port 0 and port
1 can support HOST, all ports can support the maximum speed 480Mbps.
IM300 can support one slave USB port, 2pcs HOST ports, so port 2 will assign to
Mini USB as slave function and port o USB works for WCDMA communication.
Port 1 needs external HUB to support 2pcs HOST port.
Picture 4.29
MINI USB:
Picture 4.30
USB HOST:
Picture 4.31
USB HOST:
Picture 4.32
3.12 SIM&SAM
The SAM card module can support high-speed cards so it needs BCM58302/3
smart card interfaces, but CPU has only two pcs smart card interfaces and one of
them is used for IC card so only one smart card left, so it needs switch circuits to
realize two smart cards.
SIM card:
Picture 4.33
SAM:
Picture 4.34
Picture 4.35
3.13 3G
3G module adopts MU709-2.
3.8V:
Picture 4.36
3.14 UART
IM300 requires 4pcs UART port design and UART port are as follows:
Picture 4.37
Only UART3 and UART4 need to supply external power but UART1 and UART2
don’t need.
Picture 4.38
Picture 4.39
RS232 port:
Picture 4.40
RS232 port:
Picture 4.41
IM500 power supply:
Picture 4.42
Picture 4.43
Step two: please take main board away from the PCB fixed bracket and be care of
LCD.
Picture 5.1
Downloading app files
Please open TermassistInstaller to download apps or PUK file or data files.
Picture 5.2
Authorization:
1. How to clear tamper issues?
IM300 will show the following messages if IM300 is tampered.
Picture 5.3
Solution:
1) Please clear the hardware tamper factors and make sure that IM300 LCD will
the following picture which means that all tamper issues are cleared and can
do authorization.
Picture 5.4
2) Please log in PPN and choose “Clear tamper authority” authority type.
Reminder: Please install PPN Setup packages firstly and can choose another
authority types based on your needs, for example, please choose “Modify SN
authority” if you want to change SN or new main board SN is empty.
Picture 5.5
Picture 5.6
Picture 5.7
Reminder:
The 2pcs switches will be enabled if it is open but they should be disabled in commercial uses.
Solution:
1. Please connect PC and IM300 to see the System-Inforo.fac.sensorswValue.
The IM300 is in disable state if the value is 1 ahead of comma mark and is in enable
state if value is 0 ahead of comma mark.
1. Overall structure
The IM500 uses the i.MX6UL as its MCU. The primary system comprises the MCU,
NAND Flash memory, and DDR memory. Functional modules include the IC card
module, SAM card slots, magnetic card reader module, and the buzzer module
among others.
IM500 hardware block diagram:
256MB DDR
128MB NAND FLASH
USB Type B
Buzzer
Picture 1
2. PCBA boards
The IM500 is comprised of 3 boards; the MAIN board, the MESH board, and the
MESHFPC board. The MAIN board is linked to the MESHFPC via an 8 pin FPC,
and it is in turn also similarly linked to the MESH board.
Board connections:
Primary systems
Picture 2
Main board
The interfaces on main board are as follows:
Picture 3
Mesh board
The interfaces on mesh board are as follows:
1. J1, 8PIN, is connected with main board.
Picture 4
3. Chips introduction
3.1 Primary system
The primary system of the IM500 is comprised of the MCU, NAND Flash
memory, and the DDR memory. The selected MCU is the i.MX6UL, an ARM
Cortex-A7 chip, with model number MCIMX6G3CVM05AB, with a standard
operating frequency of 528MHz. The memory unit is comprised of 256MB of
DDR (either model number K4B2G1646F-BYMA or P2M2GF4ALF-GJS) as well as
128MB of NAND Flash (model number S34ML01G200BHI000).
Picture 5
Picture 6
3.3 Buzzer
The IM500 possesses a buzzer module used to output preprogrammed indicator
tones.
Picture 7
3.4 USB
The iMX6UL possesses 2 internal USB OTG connections, supporting high speed
USB mode (480Mbps).According to design requirements, the IM500 only
requires 1 slave port, using an USB type-B port.
Picture 8
Picture 9
Picture 10
3.6 Power supply system
The i.MX6UL requires external power sources of 5V, 3.3V, and 1.35V, with the
3.3V source starting up before the 1.35V source. The IM500 itself requires an
input of 5V/1A or 12V/500mA to power itself.
The current requirements of each power source are as follows:
DC_IN (12V): external input
VCC (5V): USB input or converted from DC_IN to VCC via the SY8120;
VDD (3.3V): converted from VCC to VDD via a ME3103AM5G;
1.35V: converted from VCC to 1V35 via a ME3103AM5G;
VCC:
Picture 11
VDD:
Picture 12
Picture 13
The IM500 uses a 2032 and 2450 button battery in parallel, they have a
combined capacity of 750mAh. The circuit for the battery system (VDD_SNVS_
IN) is as follows:
Picture 14
12V 5V
U27 (SY8120) SAM/RS232
3.3V CPU/Flash/LED
U15 (ME3103) Magnetic head
1.35V
3.3V U14 (ME3103) CPU/DDR
Switching
circuit RTC
Coin
battery
Picture 15
3.7 Motor
The IM500 has 1 miniature motor used for locking and unlocking cards in place.
It is implemented using the MP6513 control chip.
Picture 16
Picture 17
Picture 18
3.9 Magnetic head
The IM500 possesses an encrypted magnetic card reader, it is linked to the board
with an 8 pin connector.
Picture 19
Picture 20
3.10 Tamper-proofing Mechanisms
The IM500 tamper-proofing module makes use of 4 pairs of dynamic sensor
signals as well as 2 static sensor signals.
The specific tamper signals and the modules that they protect are as follows:
Picture 21
The IM500 has an anti-removal mechanism in the form of two switches placed
on the front of the device as shown below. These are disabled before delivery and
enabled after installation by the customer so as to prevent the device from the
being removed.
Picture 22
These two anti-removal switches are supported by the TAMPER_N0 signal. Any
maintenance or removal of the device will trigger these two switches, so it
should be disabled during servicing.
Picture 23
2. Please remove the four screws fixed around the IM500 bracket and another
one screw which is used to fix the magnetic reader ground connecting cable.
3. Please remove the six screws on the mesh board and please note that one FPC
cable is inserted under the backside, so please be slow and careful to remove
the mesh board.
4. Please remove the six screws on the main board and please note that two FPC
cables are under the backside.
Picture 5.1
Downloading app files
Please open TermassistInstaller to download apps or PUK file or data files.
Picture 5.2
Authorization
52 PAX Technology Limited Company
IM Series Unattended Payment Solutions
Reminder: The LED will be always bright and hear the buzzer sound if IM500
tamper issues aren’t cleared away.
Picture 5.3
How to clear tamper issues?
Solution: 1. Please put the assembled IM500 into testing frame and make sure
that the two anti-tampers are pressed tightly.
Picture 5.4
Picture 5.5
2. Please log in PPN and do the “Clear tamper authority” and “Disable Service
Switches”.
Picture 5.6
Picture 5.7
How to know IM500 is enabled or disenabled on Termassist tool?
Picture 5.8
Picture 5.9
Step three: Please start system log file read mode and export log file
Picture 5.10
Step four: Please open logcat file and see the tampered information.
Picture 5.11
Picture 6.1
56 PAX Technology Limited Company
IM Series Unattended Payment Solutions
Picture 6.2
Picture 6.2
Picture 6.3
IM500 testing app will be shown on IM300:
Picture 6.4
Please note that firstly choose “ttyAMA4” and then insert RS232 cable into
“CR”.
1. Overall structure
IM700 hardware takes iMX6UL as core processor, minimum system contains CPU,
DDR, FLASH and other peripheral components, functional modules contains
RF/SAM/Beep.
IM700 functional block diagram:
i.MX6UL LED*4
RFID RF module
256MB DDR
Coin
128MB NAND FLASH
battery
Picture 1
PCB board framework:
10 PIN
MAIN BOARD Antenna board
Coin battery RF module
LED
256MB DDR
SAM
128MB FLASH
Picture 2
2. PCBA boards
IM700 consists of two boards including main board and antenna board, they are
communicated by 10pin connector.
Main board: Minimum system, RF module, 5V/3.3V/1.8V/1.35V, USB,
RS232, SAM card.
Antenna board: RF antenna, LED indicator.
Picture 3
The interfaces on E700 antenna board are below:
1. J1, 10PIN, is connected with main board.
Picture 4
Picture 5
3. Chips introduction
3.1 Minimum system
IM700 minimum system contains CPU/DDR/Flash.
MCU adopts iMX6UL, ARM Cortex-A7 and the highest frequency is 528MHz.
Memory adopts 256MB DDR and 128MB FLASH.
3.2 RF module
IM700 adopts CLRC663 and its frequency is 13.56MHz, which communicates
with CPU by SPI method.
3.3 Beep
Buzzer is used to warn sound.
Picture 3.1
62 PAX Technology Limited Company
IM Series Unattended Payment Solutions
3.4 USB
CPU iMX6UL is internally embedded 2pcs USB OTG port which can support
high speed 480Mbps, but IM700 is only externally connected with one slave
interface which is type-B port.
Picture 3.2
3.5 SAM card module
IM700 can support 2pcs SAM card and its working volts are 5V.
Picture 3.3
63 PAX Technology Limited Company
IM Series Unattended Payment Solutions
VDD:
Picture 3.4
1V8:
Picture 3.5
1.35V:
Picture 3.6
VDD_SNUS_IN:
Picture 3.7
3.3V/2A
U15 (ME3103) MCU/Flash
1.8V/2A
U13 (ME3103) Camera (Optional)
1.35V/2A
U14 (ME3103) MCU/DDR
3.3V/2A
Switching MCU
circuit RTC
Coin
battery
Picture 3.8
Picture 4.1
Downloading app files
Please open TermassistInstaller to download apps or PUK file or data files.
Picture 4.2
Picture 4.3
Step two:
Picture 4.4
Step three:
Picture 4.5
Reminder: Please note that IM700 blue and yellow LED will flash and make
beep sound if IM700 is tampered, so please log in PPN and do “clear tamper”
authorization.
Picture 5.1
Step four: Run SERVER_20170515_V1.3_SIG.bin application on S80.
Select NOUI--------- RS232A, it will enter test application as below picture:
Picture 5.2