Generate a Diebold PIN Offset

Command:

Generate a PIN using the Diebold method.

Notes:

Requires the Diebold table to be in user storage.

Field

Length & Type

Details

COMMAND MESSAGE

Message header

m A

(Subsequently returned to the Host unchanged).

Command code

2 A

Value CE.

Index flag

1 A

Value K.

Table pointer

3 H

The value of the base location of the Diebold table in user storage.

Algorithm number

2 H

The number of the Diebold algorithm required.

PIN

L N or LH

The derived PIN encrypted under LMK pair 02-03.

Account number

12 N

The 12 right-most digits of the account number, excluding the check digit.

Validation data

16 A

User-defined data consisting of hexadecimal characters and the character N, which indicates to the HSM where to insert the last 5 digits of the account number. The data must be right-justified and padded with F.

End message delimiter

1 C

Optional. Must be present if a message trailer is present. Value X’19.

Message trailer

n A

Optional. Maximum length 32 characters.

 RESPONSE MESSAGE

Message header

n A

Returned to the Host unchanged.

Response code

2 A

Value CF.

Error code

2 N

00 : No errors

12 : No keys loaded in user storage

13 : LMK error; report to supervisor

14 : Encrypted PIN error

15 : Error in input data

21 : Invalid user storage index

Offset

4 N

The resulting Diebold offset.

End message delimiter

1 C

Present only if present in the command message. Value X’19.

Message trailer

n A

Present only if present in the command message. Maximum length 32 characters.