KassenSichV TSE safety device
Hypersoft uses the certified Swissbit TSE. For more information, see the manufacturer's homepage: https://www.swissbit.com/
The Swissbit TSE has a certificate term of 5 years. In addition, a five-month waiting period is granted from the date of manufacture, during which the TSE stick can be activated without reducing the planned useful life of 5 years.
Please bear in mind that the use should take place as soon as possible and without delay and should not be arbitrarily or even arbitrarily delayed until the end of the planned nonobjection period at the end of September 2020. The certificate duration of 5 years of the Swissbit stick provided by us is the maximum. There are other TSE manufacturers who offer (without price advantage) only 3 years certificate duration (-40% service life). To our knowledge, the competing online services are not yet available and are considerably more cost-intensive (we can judge this in so far as the Swissbit Stick is one of three solutions that we evaluated for you and were the only ones to have fully connected afterwards).
TSE Archive Mandatory Recommendation
Swissbit TSE Sticks are among the best solutions for storing TSE data. With the many thousands of sticks we use, we have now found that a small double-digit number can be defective without us noticing. The special thing about it, however, is that this defect is not noticeable: In this rare phenomenon, the Swissbit TSE Stick accepts the bookings, duly acknowledges the acceptance, but the stick gives out absolutely no more data. This means that no data from the stick can be exported and used during an audit (if you have not backed it up with our TSE Online Archive or manually). In the last few days and weeks we have tested the sticks remotely at our customers and have already contacted the acutely affected customers. We will replace the sticks with the help of the manufacturer. Swissbit has not yet submitted a statement on the issue. Unfortunately, Swissbit cannot make the data visible either, but assumes that the problem can no longer arise with the current Swissbit SDK (Software Development Kit). We have already distributed this SDK to all customers with active support contracts. We have also installed a monitoring system that automatically tests the TSE export at the turn of the month, for example, and sends a message to our support team if it fails. However, since the data will then also no longer be released and other errors are also conceivable, we again feel obliged to urgently advise you to use our TSE online archive (for only €2 per month), as the majority of our customers already do. Please contact your Hypersoft representative.
Further documentation: TSE Online Archive
Warning about the scope of the Hypersoft data backup...
The integrated Hypersoft data backup is described in the Integrated data backupsection.
This method does not back up TSE data. Use the TSE Online Archive programme to save your data.
TSE status at POS
At the POS system a lock appears in the Hypersoft logo if a TSE is set up and can be used.
If there is a problem (no connection, TSE stick defective) the symbol starts to flash. The TSE setup failedwill then appear on the receipts.
When bookings are sent ("open orders" in TSE Wording) or transactions are completed, a message appears (in the standard system for less than one second) and document printing should have started between 0.5 and 3 seconds. Here is an example at the POS system:
If this takes too long, it may be because too many stations or mobile devices are accessing the same TSE at the same time. Then add more TSEs and distribute the load.
If you can rule out TSE stick deficiency, delays may be caused by problems with the connection of the booking station to the TSE. This could indicate a network or USB connection problem. Please check the connection.
Due to the TSE system, the TSE stick must be initialised once a day so that the current day is confirmed on the TSE stick. As of Service Pack 11 Hotfix 27, this initialisation is carried out automatically with the /TTA
The theoretical end of day (TTA) applies the calendar day change at a time specified by you (default setting 6:00 a.m.). The programme can automatically perform closures, updates and maintenance at this time. A new sales day then begins with the first POS booking of the day..
If your POS terminal or the device that addresses the TSE stick is switched off at the time of the TTA, the initialisation can only take place the next time the POS is started and this can lead to delays.
Please make sure that the devices with TSE sticks are switched on at the TTA or arrange for slight delays in starting the affected devices.
TSE representation in Windows...
TSEs appear in Windows as "normal USB drive". ( Here D: SWISSBIT)
Hypersoft stores the file: HS-TSEID-001-STATION-001-DRIVE-0.txton the drive, which contains the TSE-ID, station and drive from the configuration for easy identification.
The remaining files are TSE internal and must not be deleted or modified under any circumstances. Hypersoft has no influence on the files on the TSE stick. Deleting the files may cause the stick to become defective. The data on the TSE stick should be "invisible" (fraud protection).
We recommend that you use the Hypersoft TSE online archive.
Most TSE manufacturers or integrators use 3rd party utilities or hardware devices to use TSE sticks with multiple tills or to place them in a central location. Hypersoft contains its own algorithm for this, so you can use these functions directly in Hypersoft.
If several recording devices (cash register stations) share a TSE, we speak of TSE multipleuse .
One or more TSE sticks can be operated in one system. Several TSE sticks can be operated on one server. You can also use one or more sticks at each checkout station. Depending on configuration and assignment, all combinations are possible. Usually, one or more sticks are provided on a server (of a location) or, for example, a sales outlet with clearing. Any other configuration should also be possible.
Further documentation: TSE Allocations and multiple use...
TSE placements direct
Not only because we do not need additional hardware in case of multiple use, but also for other reasons we recommend the direct placement of the TSE sticks.
- 1.1 Use: if you use a cash register, place the TSE stick directly on it.
- In case of doubt, they use one TSE stick per cash register or at the cash register concerned.
- If you work with a server or a main cash register, we recommend to install the TSE sticks there.
- If the server does not have enough USB ports free or if you have to use auxiliary devices (USB hubs), decide whether you want to place TSE sticks on other devices.
- If you work with point of sale clearing, use at least one TSE stick per point of sale.
- If you are working with virtualized devices or servers, you need an additional device.
- For further questions in this context, please contact your /Vendor Vendor is the name of your sales contact. The Vendor can be a Hypersoft reseller or one of its employees. If you order directly from Hypersoft, you will be assigned a vendor at Hypersoft. If you have any questions about your vendor, you can contact Hypersoft directly..
More information on this...
- Together with the planned long-term archive, Hypersoft will take care of the storage of the TSE data (which in any case will not be kept in a TSE stick for 11 years). This happens regardless of the placement or any loss or defect of the TSE sticks.
- If the network fails completely or partially, decentralised TSE units can continue to be used in the configurations.
- The device management helps you with the inventory of TSE sticks.
- In the event of hardware defects, our support has information about the TSE stick via the device management and can, in coordination with your employees, ensure that they remain in your company and are put back into operation on the replacement device.
- Each TSE stick (and any replacement device that carries a TSE stick) is supplied with a unique Hypersoft seal that secures the stick and protects against accidental removal.
In the course of the closed security concept, the TSE reference for use with Hypersoft cash register systems is exclusively via Hypersoft. Please contact your Hypersoft Vendor for this.
The ordered TSE sticks are assigned by Hypersoft in the device management of your location and are visible to you from Hypersoft at the same time as they are dispatched. Special rulesapply for the display in the device management.
The TSE in device management
The TSE is listed in the equipment management system as soon as it is delivered to them.
The TSEs are also assigned to the cash registers here.
Swissbit TSE Serial Number...
A serial number is located on the outside of the stick, e.g.: 60170505048706-1020-5
So you can decode them:
- Part 1 of the serial number is the individual hardware number of the stick, in this case 601705048706.
- Part 2 (1020) describes the start date of the production lot, here week 10 of the year 2020.
- Part 3 (5) means 5 years certificate duration.
This results in the following term:
KW 10 from 2020 = running time KW 10 in 2025
Plus 6 months logistics period (+25 KW from start date of production lot) = KW 35 in 2025
In addition, there is a further, individual time period, but this can only be read from the stick on the basis of the internal date.
When the stick is activated, the certificate duration expires, so there is no excess waiting period at the time of activation.
TSE for exclusive Hypersoft use...
The entire Hypersoft security procedure regarding TSE is designed not to use TSE from other POS system manufacturers or other sources, nor to provide Hypersoft TSE for use from other POS system manufacturers or other sources. By limiting this, we achieve optimal support for exam questions and in terms of supporting your security and auditability concept.
We cannot make exceptions to this in the standard: If you are the first Hypersoft customer to be interested in this, please send us a request for a fee to work out these options.
TSE with the emergency operation
The use of the TSEs with the emergency operation depends very much on the respective configuration. You should plan for one TSE per Hypersoft POS and any local connector for mobile devices. This means that the TSEs can continue to be used safely in emergency operation.
TSE with mobile devices
Each mobile device is a checkout station and must be set up as such.
TSE with eSolutions and 3rd party integrations
For the technical cooperation with 3 parties that are connected to the Hypersoft POS system via the e-commerce interface or online order, the same processing takes place as for the Hypersoft POS system's own bookings. Therefore, they are to be considered as conforming to the standard.
Messages...
Full implementation and activation of signing also involves reporting the devices to the tax authorities. This reporting capability has been indefinitely postponed by the legislator since June 2020.
If the device is a terminal such as a self-order terminal and no other eSolutions integrations are used, you can restrict the notification of the device to the Hypersoft eSolutions integration with the corresponding process description. If there are several terminals, tablets or terminal devices that are used in your company, they must be reported individually. For this, they must be treated like Hypersoft stations and the 3rd parties must support the station number in the connection.
No warranty...
In terms of the overall configuration, please also note your cooperation, as the existing GoBD regulations must also be complied with. In many areas of operation, the cash register inspection in particular is the responsibility of the operator.
It is theoretically possible that 3rd party systems process bookings that are not transmitted to the Hypersoft system, so that we cannot accept any liability for this. Should Hypersoft become aware of this with its own 3rd party connections, the affected 3rd party connection would have to be immediately blocked by Hypersoft with all customers for the transmission of data. In this context, we recommend that you check the systems for possible weaknesses when using 3 parties and eliminate them by configuration and/or mention this in your procedural documentation. An example of a non-compliant solution would be, for example, a tablet with a printer that runs in parallel with the hypersoft system and does not itself have a TSE or is not later registered by you with the tax office.
As we have not yet received a positive decision, please enquire about TSE conformity yourself with the manufacturer of the eSolutions connection you are using.
*1 Do not use an eSolutions interface, but are TSE compatible.
3rd Party TSE Configuration...
The following also applies to the Hypersoft Webshop and YourAPP.
-
The server must be set up as a booking station (eSolutions IF etc.).
-
Every eSolutions connection must be signed. If an eSolutions partner uses more than one end device, each must transmit its own station number. If more than one service partner is connected to the eSolutions interface, each individual partner, each service and each device must transmit a station number.
-
Since the receiving posting subsystems are not assigned to a TSE, the info and execution of the TSE station is based on the POS that starts the subsystem. The executing (signing) station is therefore always the station on which this subsystem is running.
TSE with point of sale clearing
Work on the use of TEs with point-of-sale clearing has not yet been completed. Use one TSE per cash register or per group of cash registers up to a maximum of 5 per point of sale. More extensive requirements also apply here and could require up to one TSE per cash register, as is the case everywhere.
TSE with Virtual Cash Stations
(This topic does not cover virtualized systems but the Hypersoft function of the same name, for virtual devices see TSE with virtual devices)
Documentation of the function: Use virtual checkout station
A prerequisite for the use of the function in connection with the Cash Guarantee Ordinance and the obligation to report is that the cash register is always used at the same location or that the location can be traced using the procedure description and the reporting data.
We recommend to document the usability of virtual POS stations according to the system setup.
By initiating a virtual cash station, its cash register number (number from Hypersoft) is also used. For the purpose of traceability, however, the cash register number of the main device (from which the virtual cash station was initiated) is also stored in the booking journal. The journal thus contains two columns for cash register numbers, one of which can be changed to its cash register number by initiating a Virtual Cash Register Station.
Changes to stations...
When the cash register number is changed in the ward management, a message is displayed that the TSE setup should be checked. Please always keep the TSE in mind when making changes to the system, even on your own initiative.
Special feature - Virtual servers under HYPER-V
Another special feature are POS systems with virtual servers under Hyper-V environments. In this environment an additional device is needed which provides USB ports via network.
In 2017, we tested the DS-510 from Silex (device description: http://www.silexeurope.com/de/home/produkte/usb-device-server3/ds-510.html ) and rated it as good for this application. If you think this information is outdated, please use a more recent version if necessary. Remark: The test of a much simpler device was initially positive, but then led to problems in daily practice.
In principle, however, any USB device server device can be used as long as it can be recognized by the Hypersoft software. The device is set up according to the documentation accompanying the product and is not part of Hypersoft support.
Attention: When installing the software of the manufacturer, a firewall release is requested.
After setup, the signature creation device (the USB stick) must then be set to Automatic interface in the context menu. In the menu Options you have to check if the checkbox Automatic interface at program start is activated. (This should be selected by default.)
It should be verified by a test restart of the server that the stick is still automatically available after a restart. In this example you can see this in the following dialog:
TSE at zero position
A German Hypersoft POS system must be put into operation with TSE. This also applies to a zero setting after the test and before commissioning. Zeroing can only be performed if a TSE has been set up. The zero setting is carried out in interaction with the TSE and the process is thus secured.
No exceptions are provided for. If you do not want to use a TSE for zeroing, you can do without zeroing. In any case, the test period must be plausible and documented by you as the operator (taxable person).
Further documentation: Hypersoft procedure for zeroing
TSE with test systems
Hypersoft test or demo systems are used at trade fairs and in specialist shops. Some of our customers also operate a test system, which is mostly used in the head office for training and for the verification of updates and new techniques. None of these systems are used in productive use.
Hypersoft makes no recommendation as to whether or not to use a TSE for this purpose. You can order TSEs for these systems from Hypersoft.
TSE at end of day and at restart
At the end of the day, the system checks whether a TSE unit that has failed is responsive again and, if possible, puts it back into operation.
You can assume with a restart of the entire system that the recommissioning of failed TSEs will be tested and executed if necessary.
When the TSE stick still needs to be renewed
The TSE stick has a time limit, a kind of expiry date of the certificate (5 years in the standard). If you change the master data, a renewal can also be indicated.
Further documentation:
Does the TSE stick have to be renewed when changes are made?
Questions on change of ownership or termination of business
Special TSE error treatments
IO problems and error messages of the hardware...
If a signature fails, the stick is completely reinitialised. If this does not solve the problem, the programme (including the Swissbit dlls) must be restarted. A restart occurs a maximum of 1 time per hour, and then only if communication with the TSE is possible. Out of operation, the TSE Error Report can also show the TSE as failed for several hours until it is addressed and responds in resumed operation.
Error when exporting the TSE archive...
If the export of the TAR archive fails, an Incident is triggered.
TSE error reports and evaluations...
The TSE system has several reports:
-
The TSE Error Report reports errors when trying to use the TSE. Usually these are TSE sticks that are not accessible, but they can also be defective TSE sticks. A TSE failure is also indicated on receipts and the POS system.
-
The TSE Error Report looks at known problems when dealing with signatures and creating export data. These errors usually affect older data, as they can be eliminated by updates for the future.
-
The TSE export lists the number and totals of signings per day and TSE station. It checks whether the turnover totals agree with the payment totals and, in the event of an error, it totals and groups the differences. In addition, Foreign currencies are evaluated separately.
Further documentation: TSE installation, Set up TSE, TSE failure
Back to the parent page: Fiscal law in Germany