Translate Decimalisation Table from Old to New LMK

Command:

Translate an Encrypted Decimalisation Table from Encryption under an LMK in Key Change Storage pair 18-19 variant 1, to a new LMK pair 18-19 variant 1.

Notes:

This command is provided to simplify the LMK conversion process for issuers or transaction processors who use a large number of decimalisation tables.

The use of encrypted decimalisation tables is strongly recommended. By default the HSM is configured to expect encrypted decimalisation tables in PIN verification commands that use the IBM method.

For backward compatibility the HSM may be configured to use plaintext decimalisation tables using Configure Security.

 

 

Field

Length & Type

Details

COMMAND MESSAGE

Message header

m A

(Subsequently returned to the Host unchanged).

Command code

2 A

Value LO.

Decimalisation Table (old LMK)

16H

A decimalisation table encrypted under the old LMK pair 18-19 variant 1

End message delimiter

1 C

Optional. Must be present if a message trailer is present. Value X’19.

Message trailer

n A

Optional. Maximum length 32 characters.

RESPONSE MESSAGE

Message header

n A

Returned to the Host unchanged.

Response code

2 A

Value LP.

Error code

2 N

00 : No errors

13 : LMK error; report to supervisor

15 : Error in input data

25 : Error in decimalisation table

33 : LMK Key Change Storage error

Decimalisation Table (new LMK)

16H

The decimalisation table encrypted under the new LMK pair 18-19 variant 1

End message delimiter

1 C

Present only if present in the command message. Value X’19.

Message trailer

n A

Present only if present in the command message. Maximum length 32 characters.