List of Host Commands (Functional)

Function	Command
GENERATING A KEY
Generate a Key	A0 (A1)
Generate and Print a Component	A2 (A3)
Generate and Print a Key as Split Components	NE (NF)
Form a Key from Encrypted Components	A4 (A5)
Generate a CVK Pair	AS (AT)
Generate a TMK, TPK or PVK	HC (HD)
Generate and Print a TMK, TPK or PVK	OE (OF) (OZ)
Generate a Pair of PVKs	FG (FH)
Generate a TAK	HA (HB)
Generate a Watchword Key	FO (FP)
Generate ZEK/ZAK	FI (FJ)
Generate a ZPK	IA (IB)
Form a ZMK from Three ZMK Components	GG (GH)
Form a ZMK from 2 to 9 ZMK Components	GY (GZ)
Generate and Print a ZMK Component	OC (OD) (OZ)

TRANSLATING A KEY (FROM ONE ENCRYPTION TO ANOTHER)
Import a Key	A6 (A7)
Export a Key	A8 (A9)
Translate Key Scheme	B0 (B1)

CVK PAIR
Translate a CVK Pair from Old LMK to New LMK Encryption	AY (AZ)
Translate a CVK Pair from LMK to ZMK Encryption	AU (AV)
Translate a CVK Pair from ZMK to LMK Encryption	AW (AX)

TMK / TPK / PVK
Translate a TMK, TPK or PVK	AA (AB)
Translate a TMK, TPK or PVK from LMK to Another TMK, TPK or PVK	AE (AF)
Translate a TMK, TPK or PVK from LMK to ZMK Encryption	FE (FF)
Translate a TMK, TPK or PVK from ZMK to LMK Encryption	FC (FD)

TAK
Translate a TAK	AC (AD)
Translate a TAK from LMK to TMK Encryption	AG (AH)
Translate a TAK from LMK to ZMK Encryption	MG (MH)
Translate a TAK from ZMK to LMK Encryption	MI (MJ)
WWK
Translate a Watchword Key from LMK to ZMK Encryption	FQ (FR)
Translate a Watchword Key from ZMK to LMK Encryption	FS (FT)
ZEK / ZAK
Translate a ZEK/ZAK from LMK to ZMK Encryption	FM (FN)
Translate a ZEK/ZAK from ZMK to LMK Encryption	FK (FL)
ZPK
Translate a ZPK	KC (KD)
Translate a ZPK from LMK to ZMK Encryption	GC (GD)
Translate a ZPK from ZMK to LMK Encryption	FA (FB)
ZMK
Translate a ZMK	GE (GF)
Translate ZMK from ZMK to LMK encryption	BY (BZ)
General
Translate Keys from Old LMK to New LMK	BW (BX)
Erase the Key Change Storage	BS (BT)
Translate Decimalisation Table from Old to New LMK	LO (LP)

PIN SOLICITATION
Load Solicitation Data to User Storage	QA (QB)
Final Load of Solicitation Data to User Storage	QC (QD)

CLEAR PIN
Encrypt a Clear PIN	BA (BB)
Decrypt an Encrypted PIN	NG (NH)

GENERATING A PIN, PIN OFFSET, PVV
Derive a PIN Using the Diebold Method	GA (GB)
Derive a PIN Using the IBM Method	EE (EF)
Generate a Random PIN	JA (JB)
Generate a Diebold PIN Offset	CE (CF)
Generate an IBM PIN Offset	DE (DF)
Generate a VISA PIN Verification Value	DG (DH)

VERIFY AN INTERCHANGE PIN
Verify an Interchange PIN Using the Comparison Method	BE (BF)
Verify an Interchange PIN Using the Diebold Method	EG (EH)
Verify an Interchange PIN Using the IBM Method	EA (EB)
Verify an Interchange PIN Using the VISA Method	EC (ED)


VERIFY A TERMINAL PIN
Verify a Terminal PIN Using the Comparison Method	BC (BD)
Verify a Terminal PIN Using the Diebold Method	CG (CH)
Verify a Terminal PIN Using the IBM Method	DA (DB)
Verify a Terminal PIN Using the VISA Method	DC (DD)

TRANSLATING A PIN
Translate a PIN and PIN Length	BG (BH)
Translate a PIN from LMK to ZPK Encryption	JG (JH)
Translate a PIN from TPK to LMK Encryption	JC (JD)
Translate a PIN from TPK to ZPK Encryption	CA (CB)
Translate a PIN from One ZPK to Another	CC (CD)
Translate a PIN from ZPK to LMK Encryption	JE (JF)
Translate PIN Algorithm	BQ (BR)

PIN MAILER
Print PIN/PIN and Solicitation Data	PE (PF) (PZ)
Print a PIN Solicitation Mailer	OA (OB) (OZ)
Verify PIN/PIN and Solicitation Mailer Cryptography	PG (PH)
Verify Solicitation Mailer Cryptography	RC (RD)

MESSAGE AUTHENTICATION
Generate a MAC	MA (MB)
Generate MAC (MAB) for Large Message	MQ (MR)
Verify a MAC	MC (MD)
Verify and Translate a MAC	ME (MF)
Generate MAC (MAB) using ANSI X9.19 Method for a Large Message	MS (MT)
Generate a Binary MAC (Base24)	MK (ML)
Verify a Binary MAC (Base24)	MM (MN)
Verify and Translate a Binary MAC (Base24)	MO (MP)

PRINT FORMATTING
Load a PIN Text String	LI (LJ)
Load Formatting Data to HSM	PA (PB)
Load Additional Formatting Data to HSM	PC (PD)

USER STORAGE
Load Data to User Storage	LA (LB)
Verify the Diebold Table in User Storage	LC (LD)
Read Data from User Storage	LE (LF)

WATCHWORD SUPPORT
Verify a Watchword Response	FU (FV)
Generate a Decimal MAC	LK (LL)
Verify a Decimal MAC	LM (LN)

MISCELLANEOUS
Generate a VISA CVV	CW (CX)
Verify a VISA CVV	CY (CZ)
Cancel the Authorised State	RA (RB)
Set HSM Response Delay	LG (LH)
Generate a Key Check Value	BU (BV)
Generate a Key Check Value (Not Double-Length ZMK)	KA (KB)
Perform Diagnostics	NC (ND)
HSM Status	NO (NP)

VISA CASH SYSTEM
Generate and Export a *KML	DI (DJ)
Import a *KML	DK (DL)
Verify Load Signature S1 and Generate Load Signature S2	DM (DN)
Verify Load Completion Signature S3	DO (DP)
Verify Unload Signature S1 and Generate Unload Signature S2	DQ (DR)
Verify Unload Completion Signature S3	DS (DT)

CHIP CARD
ARQC (or TC/AAC) Verification and/or ARPC Generation	KQ (KR)
Data Authentication Code and Dynamic Number Verification	KS (KT)
Generate Secure Message with Integrity and optional Confidentiality and PIN Change	KU (KV)
ARQC (or TC/ACC Verification and/or ARPC Generation (EMV2000)	KW (KX)
Generate Secure Message with Integrity and optional Confidentiality and PIN Change (EMV2000).	KY (KZ)
Verify Encrypted Counters (M/Chip 4)	K0 (K1)

AMERICAN EXPRESS SECURITY CODE
Generate a *CSCK	RY (RZ)
Export a *CSCK	RY (RZ)
Import a *CSCK	RY (RZ)
Calculate Card Security Codes	RY (RZ)
Verify Card Security Codes	RY (RZ)


RACAL TRANSACTION KEY SCHEME
Transaction Request With a PIN (T/AQ Key)	RI (RJ)
Transaction Request With a PIN (T/CI Key)	RU (RV)
Transaction Request Without a PIN	RK (RL)
Administration Request Message	RM (RN)
Transaction Response with Auth Para from Card Issuer	RO (RP)
Generate Auth Para and Transaction Response	RQ (RR)
Translate KEYVAL	RW (RX)
Confirmation	RS (RT)

DERIVED UNIQUE KEY PER TRANSACTION
Generate an Base Derivation Key (*BDK)	BI (BJ)
Translate a PIN from *BDK Encryption to Interchange Key Encryption	CI (CJ)
Translate a PIN from *BDK Encryption to Interchange Key Encryption (Triple-DES DUKPT)	G0 (G1)
Verify a PIN Using the IBM Method	CK (CL)
Verify a PIN Using the VISA PVV Method	CM (CN)
Verify a PIN Using the Diebold Method	CO (CP)
Verify a PIN Using the Encrypted PIN Method	CQ (CR)
Translate a Base Derivation Key from *ZMK to LMK Encryption	DW (DX)
Translate a Base Derivation Key from LMK to *ZMK Encryption	DY (DZ)
Verify a PIN Using the IBM Method (Triple-DES DUKPT)	GO (GP)
Verify a PIN Using the VISA PVV Method (Triple-DES DUKPT)	GQ (GR)
Verify a PIN Using the Diebold Method (Triple-DES DUKPT)	GS (GT)
Verify a PIN Using the Encrypted PIN Method (Triple-DES DUKPT)	GU (GV)
Generate/Verify a MAC using a Triple-DES DUKPT MAC Key	GW (GX)

AUSTRALIAN TRANSACTION KEY SCHEME
Transaction Request Without a PIN	RE (RF)
Transaction Request With a PIN (T/AQ Key)	RG (RH)
Transaction Request With a PIN (T/CI Key)	RI (RJ)
Transaction Response With Auth Para Generated by the Acquirer	RK (RL)
Transaction Response With Auth Para Generated by the Card Issuer	RM (RN)
Translate a PIN from PEK to ZPK Encryption	RO (RP)
Verify a Transaction Completion Confirmation Request	RQ (RR)
Generate a Transaction Completion Response	RS (RT)
Verify a PIN at the Card Issuer Using the IBM Method	QQ (QR)
Verify a PIN at the Card Issuer Using the Diebold Method	QS (QT)
Verify a PIN at the Card Issuer Using the Visa Method	QU (QV)
Verify a PIN at the Card Issuer by Comparison	QW (QX
Generate Auth Para at the Card Issuer	RU (RV)
Message Authentication Mode Numbers	MU (MV)
Generate a MAC on a Binary Message	MW (MX

USING THE OPTIONAL RSA CRYPTOSYSTEM
Generate an RSA Key Set	EI (EJ)
Load a Secret Key	EK (EL)
Translate a Secret Key from the Old LMK to a New LMK	EM (EN)
Generate a MAC on a Public Key	EO (EP)
Verify a MAC on a Public Key	EQ (ER)
Validate a Certificate and Generate a MAC on its Public Key	ES (ET)
Translate a MAC on a Public Key	EU (EV)
Generate a Signature	EW (EX)
Validate a Signature	EY (EZ)
Import a DES Key	GI (GJ)
Export a DES Key	GK (GL)
Hash a Block of Data	GM (GN)