Decrypt an Encrypted PIN

Command:

Decrypt an encrypted PIN and return a reference number.

Notes:

The command is available only if selected during configuration see the Operation and Installation manual).

The HSM must be in the Authorised state.

The reference number can be used in solicitation data processing.

Field

Length & Type

Details

COMMAND MESSAGE

Message header

m A

(Subsequently returned to the Host unchanged).

Command code

2 A

Value NG.

Account number

12 N

The 12 right-most digits of the account number, excluding the check digit.

PIN

L N

The PIN encrypted under LMK pair 02-03.

End message delimiter

1 C

Optional. Must be present if a message trailer is present. Value X’19.

Message trailer

n A

Optional. Maximum length 32 characters.

RESPONSE MESSAGE

Message header

m A

Returned to the Host unchanged.

Response code

2 A

Value NH.

Error code

00 : No errors

13 : LMK error; report to supervisor

14 : Error in encrypted PIN

15 : Error in input data

17 : Not in the Authorized state

PIN

L N

The clear PIN left-justified and padded with X’F.

Reference number

12 N

The reference number derived by encrypting the account number under LMK pair 18-19.

End message delimiter

1 C

Present only if present in the command message. Value X’19.

Message trailer

n A

Present only if present in the command message. Maximum length 32 characters.