Verify Unload Completion Signature S3

Command:

Verify Unload Completion Signature S₃.

Field

Length & Type

Details

COMMAND MESSAGE

Message header

m A

(Subsequently returned to the Host unchanged).

Command code

2 A

Value DS.

*KML

32H or 1A+32H

*KML, encrypted under Variant 2 of LMK pair 04-05.

BIN _IEP

6 H

IEP Issuer Visa assigned BIN.

ID _IEP

10 H

IEP Serial number.

DEXP _IEP

6 H

IEP Expiration date (YYMMDD format).

NT _IEP

4 H

IEP Transaction counter.

ID _ACQ

8 H

Acquirer BIN.

R

8 H

Random number.

CC _IEP

4 H

Completion code.

S₃

16 H

Unload completion signature for validation.

VKL _IEP

2 H

Optional.  Load Key version. If present but ALGL_IEP not present, then a double length KDL will be used; see Notes in Introduction. Must be present if ALGL_IEP is present.

ALGL_IEP

2 H

Optional. Load Algorithm. Can only take the values 01 and 04. If set to 01 a single length KDL is used and VKL_IEP is ignored. If 04, a double length KDL is used and VKL_IEP is used.

End message delimiter

1 C

Optional. Must be present if a message trailer is present. Value X’19.

Message trailer

n A

Optional. Maximum length 32 characters.

 RESPONSE MESSAGE

Message header

n A

Return to the Host unchanged.

Response code

2 A

Value DT.

Error code

2 N

00 : No errors

01 : S₃  verification failure

03 : Invalid ALGL_IEP

10 : *KML parity error

12 : No keys loaded in user storage

13 : LMK error; report to supervisor

15 : Error in input data

21 : Invalid user storage index

27 : *KML not double length

End message delimiter

1 C

Present only if present in the command message. Value X’19.

Message trailer

n A

Present only if present in the command message. Maximum length 32 characters.