Command:

Validate the Card Issuer MAC

Notes:

Use of this command requires the optional ESP licence. Error code 67 will be returned if the command is not licensed.

Field

Length & Type

Details

COMMAND MESSAGE

Message Header

m A

Will be returned to the Host unchanged

Command Code

2 A

Value “Z0”

*KMAC_CI

32 H

Double length KMAC_CI encrypted under LMK pair 22-23 variant 3

S_CI

16 H

Signature for Verification

Date & Time

6 B

Date and Time

Function Code

2 B

Function Code

ID_DEST

4 B

ID_DEST

Block 1

2 B

Block 1, fixed to all zeroes

Block 2

9 B

Block 2 containing CNT_BATCH, CNT_ACCEPT, ID_BATCH, NT_BATCH and RESEND

Block 3

9 B

Block 3 containing Amount and Net Reconciliation

End Message Delimiter

1 C

Optional. Must be present if a message trailer is present. Value X'19

Message Trailer

n A

Optional. Maximum length 32 characters

RESPONSE MESSAGE

Message Header

m A

Will be returned to the Host unchanged

Response Code

2 A

Value “Z1”

Error Code

2 N

00 – No error. S_CI validated successfully

01 – S_CI validation failed

10 – KMAC parity error

12 – No keys loaded in user storage

13 – LMK error - report to Supervisor

15 – Error in input data

21 – Invalid user storage index

End Message Delimiter

1 C

Will only be present if present in the command message. Value X'19

Message Trailer

n A

Will only be present if in the command message. Maximum length 32 characters