Packet 17: Set Ipp7 Key Management Mode - VeriFone MX800 series Programmer's Manual

IPP MS DUKPT C
AND OMMUNICATIONS
Common Packets
Packet 15 Length:
Packet 17: Set IPP7
Key Management
Mode
Incoming Packet
Format:
300
M X 800 S P
ERIES ROGRAMMERS
P
ACKETS
Table 42 Packet 15 Format
Data Element Characteristic
<SI> 1H
Packet Type 2AN
Packet Data 4AN
<SO> 1H
1H
{LRC}
•
MAX: 9 characters
•
MIN: 9 characters
Table 43 Packet 15 Communication Protocol
Master Device
<SI>15IPP2<SO>{LRC}
ACK/NAK
This packet sets or clears a number of control switches in the key management
options register for IPP7 key management configuration. IPP7 supports the
following additional functions (as compared to IPP6):
•
Triple DES (3DES) DUKPT support
•
GISKE MS Key support
•
Zero (0) key support
Note that the new MAC alternatives apply only when GISKE is active, and are
selected by key attributes and not the key management switch.
For compatibility, the default key management mode for IPP7 is set to IPP5 mode
(MS- DUKPT or single DES mode). Once a new key management scheme is
selected, it is retained during power cycles.
Setting a new mode causes the IPP7 to erase all existing keys or non-volatile
security values stored for secure messaging.
<SI>17[KMM][PINER]<SO>{LRC}
G
UIDE
Comments
Shift In, Value: 0Fh
Value: 15
Value: 'IPP2', fixed as password
Shift Out, Value: 0Eh
Error Check
Transmit
IPP
Direction
ACK if LRC
•
NAK if LRC incorrect
•
<SI>15IPP2<SO>{LRC}
EOT to terminate process.