|
Host Command
(Response) |
Function |
|
A0 (A1) |
Generate a Key |
|
A2 (A3) |
Generate
and Print a Component |
|
A4 (A5) |
Form
a Key from Encrypted Components |
|
A6 (A7) |
Import
a Key |
|
A8 (A9) |
Export
a Key |
|
AA (AB) |
Translate
a TMK, TPK or PVK |
|
AC (AD) |
Translate
a TAK |
|
AE (AF) |
Translate
a TMK, TPK or PVK from LMK to Another TMK, TPK or PVK |
|
AG (AH) |
Translate
a TAK from LMK to ZMK Encryption |
|
AS (AT) |
Generate
a CVK Pair |
|
AU (AV) |
Translate
a CVK Pair from LMK to ZMK Encryption |
|
AW (AX) |
Translate a CVK Pair from ZMK to LMK Encryption |
|
AY (AZ) |
Translate
a CVK Pair from Old LMK to New LMK Encryption |
|
B0 (B1) |
Translate
Key Scheme |
|
BA (BB) |
Encrypt
a Clear PIN |
|
BC (BD) |
Verify
a Terminal PIN Using the Comparison Method |
|
BE (BF) |
Verify
an Interchange PIN Using the Comparison Method |
|
BG (BH) |
Translate
a PIN and PIN Length |
|
BI (BJ) |
Generate
an Base Derivation Key (*BDK) |
|
BQ (BR) |
Translate
PIN Algorithm |
|
BS (BT) |
Erase
the Key Change Storage |
|
BU (BV) |
Generate
a Key Check Value |
|
BW (BX) |
Translate
Keys from Old LMK to New LMK |
|
BY (BZ) |
Translate
ZMK from ZMK to LMK encryption |
|
CA (CB) |
Translate
a PIN from TPK to ZPK Encryption |
|
CC (CD) |
Translate a PIN from One ZPK
to Another |
|
CE (CF) |
Generate
a Diebold PIN Offset |
|
CG (CH) |
Verify
a Terminal PIN Using the Diebold Method |
|
CI (CJ) |
Translate
a PIN from *BDK Encryption to Interchange Key Encryption |
|
CK (CL) |
Verify
a PIN Using the IBM Method |
|
CM (CN) |
Verify
a PIN Using the VISA PVV Method |
|
CO (CP) |
Verify
a PIN Using the Diebold Method |
|
CQ (CR) |
Verify
a PIN Using the Encrypted PIN Method |
|
CW (CX) |
Generate
a VISA CVV |
|
CY (CZ) |
Verify
a VISA CVV |
|
DA (DB) |
Verify a Terminal PIN Using
the IBM Method |
|
DC (DD) |
Verify
a Terminal PIN Using the VISA Method |
|
DE (DF) |
Generate
an IBM PIN Offset |
|
DG (DH) |
Generate
a VISA PIN Verification Value |
|
DI (DJ) |
Generate
and Export a *KML |
|
DK (DL) |
Import
a *KML |
|
DM (DN) |
Verify
Load Signature S1 and Generate Load Signature S2 |
|
DO (DP) |
Verify
Load Completion Signature S3 |
|
DQ (DR) |
Verify
Unload Signature S1 and Generate Unload Signature S2 |
|
DS (DT) |
Verify
Unload Completion Signature S3 |
|
DW (DX) |
Translate
a Base Derivation Key from *ZMK to LMK Encryption |
|
DY (DZ) |
Translate
a Base Derivation Key from LMK to *ZMK Encryption |
|
EA (EB) |
Verify
an Interchange PIN Using the IBM Method |
|
EC (ED) |
Verify
an Interchange PIN Using the VISA Method |
|
EE (EF) |
Derive
a PIN Using the IBM Method |
|
EG (EH) |
Verify
an Interchange PIN Using the Diebold Method |
|
EI (EJ) |
Generate
an RSA Key Set |
|
EK (EL) |
Load
a Secret Key |
|
EM (EN) |
Translate
a Secret Key from the Old LMK to a New LMK |
|
EO (EP) |
Generate
a MAC on a Public Key |
|
EQ (ER) |
Verify
a MAC on a Public Key |
|
ES (ET) |
Validate
a Certificate and Generate a MAC on its Public Key |
|
EU (EV) |
Translate
a MAC on a Public Key |
|
EW (EX) |
Generate
a Signature |
|
EY (EZ) |
Validate
a Signature |
|
FA (FB) |
Translate
a ZPK from ZMK to LMK Encryption |
|
FC (FD) |
Translate
a TMK, TPK or PVK from ZMK to LMK Encryption |
|
FE (FF) |
Translate
a TMK, TPK or PVK from LMK to ZMK Encryption |
|
FG (FH) |
Generate
a Pair of PVKs |
|
FI (FJ) |
Generate ZEK/ZAK |
|
FK (FL) |
Translate
a ZEK/ZAK from ZMK to LMK Encryption |
|
FM (FN) |
Translate
a ZEK/ZAK from LMK to ZMK Encryption |
|
FO (FP) |
Generate
a Watchword Key |
|
FQ (FR) |
Translate
a Watchword Key from LMK to ZMK Encryption |
|
FS (FT) |
Translate
a Watchword Key from ZMK to LMK Encryption |
|
FU (FV) |
Verify
a Watchword Response |
|
GA (GB) |
Derive
a PIN Using the Diebold Method |
|
GC (GD) |
Translate
a ZPK from LMK to ZMK Encryption |
|
GE (GF) |
Translate
a ZMK |
|
GG (GH) |
Form
a ZMK from Three ZMK Components |
|
GI (GJ) |
Import
Key Under RSA Public Key |
|
GK (GL) |
Export
Key under RSA Public Key |
|
GM (GN) |
Hash
a Block of Data |
|
GO (GP) |
Verify
a PIN Using the IBM Method (Triple-DES DUKPT) |
|
GQ (GR) |
Verify
a PIN Using the VISA PVV Method (Triple-DES DUKPT) |
|
GS (GT) |
Verify
a PIN Using the Diebold Method (Triple-DES DUKPT) |
|
GU (GV) |
Verify
a PIN Using the Encrypted PIN Method (Triple-DES DUKPT) |
|
GW (GX) |
Generate/Verify
a MAC using a Triple-DES DUKPT MAC Key |
|
GY (GZ) |
Form
a ZMK from 2 to 9 ZMK Components |
|
G0 (G1) |
Translate
a PIN from *BDK Encryption to Interchange Key Encryption (Triple-DES DUKPT) |
|
HA (HB) |
Generate
a TAK |
|
HC (HD) |
Generate
a TMK, TPK or PVK |
|
IA (IB) |
Generate
a ZPK |
|
JA (JB) |
Generate
a Random PIN |
|
JC (JD) |
Translate
a PIN from TPK to LMK Encryption |
|
JE (JF) |
Translate
a PIN from ZPK to LMK Encryption |
|
JG (JH) |
Translate
a PIN from LMK to ZPK Encryption |
|
JO(JP) |
Validate
a Certification Authority Self-Signed Certificate (MasterCard/Europay) |
|
J0(J1) |
Generate
Issuer RSA Key Set (MasterCard/Europay) |
|
KA (KB) |
Generate
a Key Check Value (Not Double-Length ZMK) |
|
KC (KD) |
Translate a ZPK |
|
KQ (KR) |
ARQC
(or TC/AAC) Verification and/or ARPC Generation |
|
KS (KT) |
Data
Authentication Code and Dynamic Number Verification |
|
KU (KV) |
Generate
Secure Message with Integrity and optional Confidentiality and PIN Change |
|
KW (KX) |
ARQC
(or TC/ACC Verification and/or ARPC Generation (EMV4.1 including CCD) |
|
KY (KZ) |
Generate
Secure Message with Integrity and optional Confidentiality and PIN Change
(EMV 4.1 and CCD). |
|
K0 (K1) |
Verify
Encrypted Counters (M/Chip 4) |
|
K2(K3) |
Verify
Truncated Application Cryptogram (MasterCard CAP) |
|
LA (LB) |
Load
Data to User Storage |
|
LC (LD) |
Verify
the Diebold Table in User Storage |
|
LE (LF) |
Read
Data from User Storage |
|
LG (LH) |
Set
HSM Response Delay |
|
LI (LJ) |
Load
a PIN Text String |
|
LK (LL) |
Generate
a Decimal MAC |
|
LM (LN) |
Verify
a Decimal MAC |
|
LO (LP) |
Translate
Decimalisation Table from Old to New LMK |
|
LQ(LR) |
Generate
an HMAC on a Block of Data |
|
LS(LT) |
Verify
an HMAC on a Block of Data |
|
LU(LV) |
Import
an HMAC under a ZMK |
|
LW(LX) |
Export
an HMAC under a ZMK |
|
LY(LZ) |
Translate
a HMAC Key from Old LMK to New LMK |
|
L0(L1) |
Generate
an HMAC Secret Key |
|
MA (MB) |
Generate a MAC |
|
MC (MD) |
Verify
a MAC |
|
ME (MF) |
Verify
and Translate a MAC |
|
MG (MH) |
Translate
a TAK from LMK to ZMK Encryption |
|
MI (MJ) |
Translate
a TAK from ZMK to LMK Encryption |
|
MK (ML) |
Generate
a Binary MAC (Base24) |
|
MM (MN) |
Verify
a Binary MAC (Base24) |
|
MO (MP) |
Verify
and Translate a Binary MAC (Base24) |
|
MQ (MR) |
Generate
MAC (MAB) for Large Message |
|
MS (MT) |
Generate
MAC (MAB) using ANSI X9.19 Method for a Large Message |
|
MU (MV) |
Generate
a MAC on a Binary Message |
|
MW (MX |
Verify
a MAC on a Binary Message |
|
NC (ND) |
Perform
Diagnostics |
|
NE (NF) |
Generate
and Print a Key as Split Components |
|
NG (NH) |
Decrypt
an Encrypted PIN |
|
NI (NJ) |
Return
Network Information |
|
NK (NL) |
Command
Chaining Command |
|
NO (NP) |
HSM
Status |
|
OA (OB) (OZ) |
Print
a PIN Solicitation Mailer |
|
OC (OD) (OZ) |
Generate
and Print a ZMK Component |
|
OE (OF) (OZ) |
Generate
and Print a TMK, TPK or PVK |
|
PA (PB) |
Load
Formatting Data to HSM |
|
PC (PD) |
Load
Additional Formatting Data to HSM |
|
PE (PF) (PZ) |
Print
PIN/PIN and Solicitation Data |
|
PG (PH) |
Verify
PIN/PIN and Solicitation Mailer Cryptography |
|
PM (PN) |
Verify
Dynamic CVV |
|
Q0(Q1) |
Translate
Audit Record MAC Key |
|
Q2(Q3) |
Retrieve
Audit Record |
|
Q4(Q5) |
Archive
(Print) Audit Record |
|
Q6(Q7) |
Delete
Audit Record |
|
Q8(Q9) |
Audit
Record Verification |
|
QA (QB) |
Load
Solicitation Data to User Storage |
|
QC (QD) |
Final
Load of Solicitation Data to User Storage |
|
QQ (QR) |
Verify
a PIN at the Card Issuer Using the IBM Method |
|
QS (QT) |
Verify
a PIN at the Card Issuer Using the Diebold Method |
|
QU (QV) |
Verify
a PIN at the Card Issuer Using the Visa Method |
|
QW (QX |
Verify
a PIN at the Card Issuer by Comparison |
|
RA (RB) |
Cancel
Authorised Activities |
|
RC (RD) |
Verify
Solicitation Mailer Cryptography |
|
RI (RJ) |
Transaction
Request With a PIN (T/AQ Key) (RTKS) |
|
RK (RL) |
Transaction
Request Without a PIN (RTKS) |
|
RM (RN) |
Administration
Request Message (RTKS) |
|
RO (RP) |
Transaction
Response with Auth Para from Card Issuer (RTKS) |
|
RQ (RR) |
Generate
Auth Para and Transaction Response (RTKS) |
|
RS (RT) |
Confirmation (RTKS) |
|
RU (RV) |
Transaction
Request With a PIN (T/CI Key) (RTKS) |
|
RW (RX) |
Translate
KEYVAL (RTKS) |
|
RE (RF) |
Transaction
Request Without a PIN (ATKS) |
|
RG (RH) |
Transaction
Request With a PIN (T/AQ Key) (ATKS) |
|
RI (RJ) |
Transaction
Request With a PIN (T/CI Key) (ATKS) |
|
RK (RL) |
Transaction
Response With Auth Para Generated by the Acquirer (ATKS) |
|
RM (RN) |
Transaction
Response With Auth Para Generated by the Card Issuer (ATKS) |
|
RO (RP) |
Translate
a PIN from PEK to ZPK Encryption (ATKS) |
|
RQ (RR) |
Verify
a Transaction Completion Confirmation Request (ATKS) |
|
RS (RT) |
Generate
a Transaction Completion Response (ATKS) |
|
RU (RV) |
Generate
Auth Para at the Card Issuer (ATKS) |
|
RY (RZ) |
Generate
a *CSCK |
|
RY (RZ) |
Export
a *CSCK |
|
RY (RZ) |
Import
a *CSCK |
|
RY (RZ) |
Calculate
Card Security Codes |
|
RY (RZ) |
Verify
Card Security Codes |
|
R2(R3) |
Export
Electronic Purse Card Key Set |
|
R4(R5) |
Export
Chip Card Key Set |
|
R6(R7) |
Export
Magnetic Stripe Card Key Set |
|
R8(R9) |
Import
Transport Key Set |
|
T0(T1) |
Unlinked
Load Transaction Request |
|
T2(T3) |
Release
RLSAM |
|
T4(T5) |
Release
R2LSAM |
|
T6(T7) |
Verify
RCEP |
|
U0(U1) |
Decrypt
R1 and validate
the MACLSAM |
|
U2(U3) |
Compute
HCEP |
|
U4(U5) |
Validate
the S1 MAC (Load
and Unload) |
|
U6(U7) |
Validate
the S1 MAC (Currency
Exchange) |
|
U8(U9) |
Generate
the S2 MAC (Linked
load, declined unlinked load, unload) |
|
V0(V1) |
Generate
the S2 MAC (Currency
Exchange) |
|
V2(V3) |
Generate
the S2 MAC (Approved
Unlinked Load) |
|
V4(V5) |
Validate
the S3 MAC (Currency
Exchange transactions) |
|
V6(V7) |
Validate
the S3 MAC (Load
or Unload transactions) |
|
V8(V9) |
Validate
the H2LSAM |
|
W0(W1) |
Validate
S6 MAC |
|
W2(W3) |
Validate
S6’ MAC |
|
W4(W5) |
Validate
S6’’ MAC |
|
W6(W7) |
Validate
S5’,DLT MAC |
|
W8(W9) |
Validate
S5’,ISS MAC |
|
X0(X1) |
Validate
the S4 MAC–
Old Terminals |
|
X2(X3) |
Validate
the S4 MAC–
New Terminals |
|
X4(X5) |
Validate
the S5 MAC–
Old Terminals |
|
X6(X7) |
Validate
the S5’ MAC
(MAC of the PSAM for a Transaction) – New Terminals |
|
X8(X9) |
Validate
the S5 Variant
MAC (MAC of the PSAM for an Issuer Total) New
Terminals |
|
Y0(Y1) |
Create
the Acknowledgement MAC – Old Terminals |
|
Y2(Y3) |
Create
the Acknowledgement MAC – New Terminals |
|
Y4(Y5) |
Create
the Update MAC |
|
Y6(Y7) |
Validate
the SADMIN MAC
(Administrative MAC of the PSAM) |
|
Y8(Y9) |
Create
the Merchant
Acquirer MAC |
|
Z0(Z1) |
Validate
the Card Issuer MAC |
|
|
|