Viewing HSM Security Configuration

Command: QS (Query Security). Can be used in online, offline or secure state.

Function:     Reports the security configuration of the HSM and some processing parameters, plus the LMK check value.

Inputs:        None.

Outputs:     PIN length:
Encrypted PIN length:
Echo: OFF or ON
Atalla ZMK variant support: OFF or ON
Transaction key support: Racal or Australian
User storage key length: Single, Double or Triple
Single-DES: Enabled or Disabled
Select clear PINs: Y or N
Enable ZMK translate command: YES or NO
Enable X9.17 for import: YES or NO
Enable X9.17 for export: YES or NO
Solicitation batch size:
ZMK length: S or D.
PIN encryption algorithm: A or B
Card/password authorisation: C or P                                                              Encrypted or plaintext decimalisation table E or P
Decimalisation table checks enabled: YES or NO
LMK check:
Old LMK loaded: YES or NO.

Errors:        None.


Example:

Online> QS <Return>

PIN length: 04

Encrypted PIN length: 05

Echo: OFF

Atalla ZMK variant support: OFF

Transaction key support: Racal

User storage key length: Triple

Select clear PINs: N

Enable ZMK translate command: NO

Enable X9.17 for import: NO

Enable X9.17 for export: NO

Solicitation batch size: 1024

Single-DES: Disabled

ZMK length: S

Encrypted\plaintext decimalisation table: E

Decimalisation table checks: Enabled

PIN encryption algorithm: A

Card/password authorisation: C

 

LMK check: 0123 4567 89AB CDEF

Old LMK loaded: NO