Translate a PIN from PEK to ZPK Encryption

Command:

Translate an encrypted PIN block from encryption under PEK to encryption under a Zone PIN Key (ZPK).

Notes:

Used with the RI command, transaction request with PIN (T/CI key).

Field

Length & Type

Details

COMMAND MESSAGE

Message header

m A

(Subsequently returned to the Host unchanged).

Command code

2 A

Value RO.

PIN encrypting  key

16 H

PEK encrypted under LMK pair 14-15.

Zone PIN key

16H or
1A+32H or 1A+48H

ZPK encrypted under LMK pair 06-07.

Encrypted PIN block

16 H

From terminal, encrypted under card key and PEK.

End message delimiter

1 C

Optional. Must be present if a message trailer is present. Value X’19.

Message trailer

n A

Optional. Maximum length 32 characters.

RESPONSE MESSAGE

Response code

2 A

Value RP.

Error code

2 N

00 : No errors

10 : PEK parity error

11 : ZPK parity error

12 : No keys loaded in user storage

13 : LMK error; report to supervisor

15 : Error in input data

21 : Invalid user storage index

90 : Communications link parity error

91 : Communications link LRC error

92 : Transparent async data length error

Encrypted PIN block

16 H

Now encrypted under card key and ZPK.

End message delimiter

1 C

Present only if present in the command message. Value X’19.