List of Host Commands (Alphabetical)

Host Command

(Response)

Function

A0 (A1)


Generate a Key

A2 (A3)

Generate and Print a  Component

A4 (A5)


Form a Key from Encrypted Components

A6 (A7)


Import a Key

A8 (A9)


Export a Key

AA (AB)

Translate a TMK, TPK or PVK

AC (AD)

Translate a TAK

AE (AF)

Translate a TMK, TPK or PVK from LMK to Another TMK, TPK or PVK

AG (AH)

Translate a TAK from LMK to ZMK Encryption

AS (AT)

Generate a CVK Pair

AU (AV)

Translate a CVK Pair from LMK to ZMK Encryption

AW (AX)


Translate a CVK Pair from ZMK to LMK Encryption

AY (AZ)

Translate a CVK Pair from Old LMK to New LMK Encryption

B0 (B1)


Translate Key Scheme

BA (BB)

Encrypt a Clear PIN

BC (BD)

Verify a Terminal PIN Using the Comparison Method

BE (BF)

Verify an Interchange PIN Using the Comparison Method

BG (BH)

Translate a PIN and PIN Length

BI (BJ)

 


Generate an Base Derivation Key (*BDK)

BQ (BR)

Translate PIN Algorithm

BS (BT)

Erase the Key Change Storage

BU (BV)

Generate a Key Check Value

BW (BX)

Translate Keys from Old LMK to New LMK

BY (BZ)


Translate ZMK from ZMK to LMK encryption

CA (CB)

Translate a PIN from TPK to ZPK Encryption

CC (CD)


Translate
a PIN from One ZPK to Another

CE (CF)


Generate a Diebold PIN Offset

CG (CH)

Verify a Terminal PIN Using the Diebold Method

CI (CJ)

Translate a PIN from *BDK Encryption to Interchange Key Encryption

CK (CL)

Verify a PIN Using the IBM Method

CM (CN)


Verify a PIN Using the VISA PVV Method

CO (CP)

Verify a PIN Using the Diebold Method

CQ (CR)

Verify a PIN Using the Encrypted PIN Method

CW (CX)

Generate a VISA CVV

CY (CZ)

Verify a VISA CVV

DA (DB)


Verify
a Terminal PIN Using the IBM Method

DC (DD)

Verify a Terminal PIN Using the VISA Method

DE (DF)

Generate an IBM PIN Offset

DG (DH)

Generate a VISA PIN Verification Value

DI (DJ)

Generate and Export a *KML

DK (DL)

Import a *KML

DM (DN)

Verify Load Signature S1 and Generate Load Signature S2

DO (DP)

Verify Load Completion Signature S3

DQ (DR)

Verify Unload Signature S1 and Generate Unload Signature S2

DS (DT)

Verify Unload Completion Signature S3

DW (DX)

Translate a Base Derivation Key from *ZMK to LMK Encryption

DY (DZ)

Translate a Base Derivation Key from LMK to *ZMK Encryption

EA (EB)

Verify an Interchange PIN Using the IBM Method

EC (ED)

Verify an Interchange PIN Using the VISA Method

EE (EF)

Derive a PIN Using the IBM Method

EG (EH)

Verify an Interchange PIN Using the Diebold Method

EI (EJ)

Generate an RSA Key Set

EK (EL)

Load a Secret Key

EM (EN)

Translate a Secret Key from the Old LMK to a New LMK

EO (EP)

Generate a MAC on a Public Key

EQ (ER)

Verify a MAC on a Public Key

ES (ET)

Validate a Certificate and Generate a MAC on its Public Key

EU (EV)

Translate a MAC on a Public Key

EW (EX)

Generate a Signature

EY (EZ)

Validate a Signature

FA (FB)

Translate a ZPK from ZMK to LMK Encryption

FC (FD)

Translate a TMK, TPK or PVK from ZMK to LMK Encryption

FE (FF)

Translate a TMK, TPK or PVK from LMK to ZMK Encryption

FG (FH)

Generate a Pair of PVKs

FI (FJ)


Generate
ZEK/ZAK

FK (FL)


Translate a ZEK/ZAK from ZMK to LMK Encryption

FM (FN)

Translate a ZEK/ZAK from LMK to ZMK Encryption

FO (FP)

Generate a Watchword Key

FQ (FR)

Translate a Watchword Key from LMK to ZMK Encryption

FS (FT)

Translate a Watchword Key from ZMK to LMK Encryption

FU (FV)

Verify a Watchword Response

GA (GB)

Derive a PIN Using the Diebold Method

GC (GD)

Translate a ZPK from LMK to ZMK Encryption

GE (GF)


Translate a ZMK

GG (GH)

Form a ZMK from Three ZMK Components

GI (GJ)

Import a DES Key

GK (GL)

Export a DES Key

GM (GN)

Hash a Block of Data

GO (GP)

Verify a PIN Using the IBM Method (Triple-DES DUKPT)

GQ (GR)

Verify a PIN Using the VISA PVV Method (Triple-DES DUKPT)

GS (GT)

Verify a PIN Using the Diebold Method (Triple-DES DUKPT)

GU (GV)

Verify a PIN Using the Encrypted PIN Method (Triple-DES DUKPT)

GW (GX)

Generate/Verify a MAC using a Triple-DES DUKPT MAC Key

GY (GZ)

Form a ZMK from 2 to 9 ZMK Components

G0 (G1)

Translate a PIN from *BDK Encryption to Interchange Key Encryption (Triple-DES DUKPT)

HA (HB)


Generate a TAK

HC (HD)

Generate a TMK, TPK or PVK

IA (IB)


Generate a ZPK

JA (JB)

Generate a Random PIN

JC (JD)

Translate a PIN from TPK to LMK Encryption

JE (JF)

Translate a PIN from ZPK to LMK Encryption

JG (JH)

Translate a PIN from LMK to ZPK Encryption

KA (KB)

Generate a Key Check Value (Not Double-Length ZMK)

KC (KD)


Translate a ZPK

KQ (KR)

ARQC (or TC/AAC) Verification and/or ARPC Generation

KS (KT)

Data Authentication Code and Dynamic Number Verification

KU (KV)

Generate Secure Message with Integrity and optional Confidentiality and PIN Change

KW (KX)

ARQC (or TC/ACC Verification and/or ARPC Generation (EMV2000)

KY (KZ)

Generate Secure Message with Integrity and optional Confidentiality and PIN Change (EMV2000).

K0 (K1)

Verify Encrypted Counters (M/Chip 4)

LA (LB)

Load Data to User Storage

LC (LD)

Verify the Diebold Table in User Storage

LE (LF)

Read Data from User Storage

LG (LH)

Set HSM Response Delay

LI (LJ)

Load a PIN Text String

LK (LL)

Generate a Decimal MAC

LM (LN)

Verify a Decimal MAC

LO (LP)

Translate Decimalisation Table from Old to New LMK

MA (MB)


Generate
a MAC

MC (MD)

Verify a MAC

ME (MF)

Verify and Translate a MAC

MG (MH)

Translate a TAK from LMK to ZMK Encryption

MI (MJ)


Translate a TAK from ZMK to LMK Encryption

MK (ML)

Generate a Binary MAC (Base24)

MM (MN)

Verify a Binary MAC (Base24)

MO (MP)

Verify and Translate a Binary MAC (Base24)

MQ (MR)

Generate MAC (MAB) for Large Message

MS (MT)

Generate MAC (MAB) using ANSI X9.19 Method for a Large Message

MU (MV)

Message Authentication Mode Numbers

MW (MX

Generate a MAC on a Binary Message

NC (ND)

Perform Diagnostics

NE (NF)

Generate and Print a Key as Split Components

NG (NH)

Decrypt an Encrypted PIN

NO (NP)

HSM Status

OA (OB) (OZ)

Print a PIN Solicitation Mailer

OC (OD) (OZ)


Generate and Print a ZMK Component

OE (OF) (OZ)


Generate and Print a TMK, TPK or PVK

PA (PB)

Load Formatting Data to HSM

PC (PD)

Load Additional Formatting Data to HSM

PE (PF) (PZ)

Print PIN/PIN and Solicitation Data

PG (PH)


Verify
PIN/PIN and Solicitation Mailer Cryptography

QA (QB)

Load Solicitation Data to User Storage

QC (QD)

Final Load of Solicitation Data to User Storage

QQ (QR)

Verify a PIN at the Card Issuer Using the IBM Method

QS (QT)

Verify a PIN at the Card Issuer Using the Diebold Method

QU (QV)

Verify a PIN at the Card Issuer Using the Visa Method

QW (QX

Verify a PIN at the Card Issuer by Comparison

RA (RB)

Cancel the Authorised State

RC (RD)

Verify Solicitation Mailer Cryptography

RI (RJ)

Transaction Request With a PIN (T/AQ Key) (RTKS)

RK (RL)

Transaction Request Without a PIN (RTKS)

RM (RN)

Administration Request Message (RTKS)

RO (RP)

Transaction Response with Auth Para from Card Issuer (RTKS)

RQ (RR)

Generate Auth Para and Transaction Response (RTKS)

RS (RT)

Confirmation (RTKS)

RU (RV)

Transaction Request With a PIN (T/CI Key) (RTKS)

RW (RX)

Translate KEYVAL (RTKS)

RE (RF)

Transaction Request Without a PIN (ATKS)

RG (RH)

Transaction Request With a PIN (T/AQ Key) (ATKS)

RI (RJ)

Transaction Request With a PIN (T/CI Key) (ATKS)

  

  

RK (RL)

Transaction Response With Auth Para Generated by the Acquirer (ATKS)

RM (RN)

Transaction Response With Auth Para Generated by the Card Issuer (ATKS)

RO (RP)

Translate a PIN from PEK to ZPK Encryption (ATKS)

RQ (RR)

Verify a Transaction Completion Confirmation Request (ATKS)

RS (RT)

Generate a Transaction Completion Response (ATKS)

RU (RV)

Generate Auth Para at the Card Issuer (ATKS)

RY (RZ)

Generate  a *CSCK

RY (RZ)

Export a *CSCK

RY (RZ)

Import a *CSCK

RY (RZ)

Calculate Card Security Codes

RY (RZ)

Verify Card Security Codes