Local Master Keys

The HSM Local Master Keys (LMKs) are numbered from key 00 to key 99. They are used in pairs and each pair has a function, as shown in the table.

LMK Pair	Function
00 - 01	Contains the two Smartcard “keys” (Passwords if the HSM is configured for Password mode) required for setting the HSM into the Authorized state.
02 - 03	Encrypts the PINs for Host storage.
04 - 05	Encrypts Zone Master Keys and double-length ZMKs. Encrypts Zone Master Key components under a Variant.
06 - 07	Encrypts the Zone PIN keys for interchange transactions.
08 - 09	Used for random number generation.
10 - 11	Used for encrypting keys in HSM buffer areas.
12 - 13	The initial set of Secret Values created by the user; used for generating all other Master Key pairs.
14 - 15	Encrypts Terminal Master Keys, Terminal PIN Keys, and PIN Verification Keys. Encrypts Card Verification Keys under a Variant.
16 - 17	Encrypts Terminal Authentication Keys.
18 - 19	Encrypts reference numbers for solicitation mailers.
20 - 21	Encrypts ‘not on us’ PIN Verification Keys and Card Verification Keys under a Variant.
22 - 23	Encrypts Watchword Keys.
24 - 25	Encrypts Zone Transport Keys.
26 - 27	Encrypts Zone Authentication Keys.
28 - 29	Encrypts Terminal Derivation Keys.
30 - 31	Encrypts Zone Encryption Keys.
32 - 33	Encrypts Terminal Encryption Keys.
34 - 35	Encrypts RSA Keys.
36 - 99	Reserved for future use.
There are Variants of some keys to suit particular requirements.