Encrypt a Clear PIN

Command:

Encrypt a clear text PIN.

Notes:

The HSM must be in the Authorised state.

Field

Length & Type

Details

COMMAND MESSAGE

Message header

m A

(Subsequently returned to the Host unchanged).

Command code

2 A

Value BA.

PIN

L H

The clear text PIN left-justified and padded with X‘F to the encrypted PIN length L.  Value set with the CS (Configure Security) console command (range 5 – 13).

Account number

12 N

The 12 right-most digits of the account number, excluding the check digit.

End message delimiter

1 C

Optional. Must be present if a message trailer is present. Value X’19.

Message trailer

n A

Optional. Maximum length 32 characters.

RESPONSE MESSAGE

Message header

n A

Returned to the Host unchanged.

Response code

2 A

Value BB.

Error code

2 N

00 : No errors

13 : LMK error; report to supervisor

15 : Error in input data

17 : Not in the Authorized state

PIN

L N

The PIN encrypted under LMK pair 02-03.

End message delimiter

1 C

Present only if present in the command message. Value X’19.

Message trailer

n A

Present only if present in the command message. Maximum length 32 characters.