Command: PV (PIN Verification). Can be used in online, offline or secure state.
Function: To generate a VISA PIN
Verification Value (PVV).
The HSM must be in the Authorised state.
Inputs: Encrypted
PVK A under LMK pair 14-15: 16 hexadecimal characters.
Encrypted PVK B under LMK pair 14-15: 16 hexadecimal characters.
The CVK can be presented as a double length key using the new scheme.
The PVV data block comprising:
The 11 right-most digits of the account number (excluding check digital):
11 decimal digits.
The PIN verification key indicator (PVKI): 1 decimal digit.
The 4 left-most digits of the clear PIN: 4 decimal digits.
Outputs: The PIN Verification Value (PVV): 4 decimal digits.
Errors: Command only allowed from authorised – the HSM must be in authorised state.
Data invalid; please re-enter: - the PVK A, PVK B or the PVV data block field is not 16 characters long. Re-enter the correct number of characters.
Key parity error; please re-enter: - the PVK A or PVK B does not have odd parity on each byte. Re-enter the encrypted PVK A or PVK B and check for typographic errors.
Internal failure 12: function aborted - the contents of LMK storage have been corrupted or erased. Do not continue. Inform the Security Department.
Example 1:
Online-AUTH> PV <Return>
Enter key A: XXXX XXXX XXXX XXXX <Return>
Enter key B: XXXX XXXX XXXX XXXX <Return>
Enter PVV data block: XXXXXXXXXXX N NNNN <Return>
(Where: X…X = 11 digits of account number, N = PVK1, and NNNN = 4 digits of PIN.)
PVV: NNNN
Example 2:
Online-AUTH> PV <Return>
Enter key A: U XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX <Return>
Enter PVV data block: XXXXXXXXXXX N NNNN <Return>
PVV: NNNN