VeriFone MX800 series Programmer's Manual page 303

Packet 17 Set IPP Key Management Mode
Master Device
<SI>17[KMM][PINER]<SO>{LRC}
ACK if LRC and key management echo
•
is OK
NAK if LRC incorrect
•
EOT after 3 NAKs
•
EOT if LRC is correct, but key
•
management echo is not OK.
•
The default setting of the IPP KM mode is "old single DES mode" (IPP5/6 =
NOTE
all zeros in the KMM register). When defaulting to IPP5/6 mode, the IPP is
also set to default to VISA mode (not SPAIN).
•
When the IPP receives packet 17 to change KM modes (for example, to
3DES or SM mode). the master device must know the new specification and
functions associated with the IPP. If the IPP is not in the "old single DES"
mode (IPP5/6), the IPP ignores packet 15 and will not allow itself to be
switched to SPAIN mode unless the KMM register is set to IPP5/6 mode.
•
SPAIN mode is a submode of the single DES (IPP5/6) KMM register setting.
A change from 1DES to 3DES or mixed mode will disable SPAIN mode.
•
When zero GISKE session key support is enabled (that is, on), the current
master key is used for PIN encryption only if packet Z60 has a zero GISKE
(3DES) session key and the current master key has its key attribute set to
"PIN Encryption" or "ANY." A zero GISKE (3DES) session key means that all
fields are zero in the GISKE key block.
•
The master device must delay for at least 500 msec before send a packet to
the IPP when the KMM is switched from IPP7 to SM or from SM to IPP7.
•
Switching from SM to IPP7 mode causes a factory reset. The IPP clears the
contents of RAM and communication to the IPP is reset to the default, 1200
baud, 7 data bits, even parity, and 1 stop bit (7E1).
•
Changing the MAC empty working key support flag erases all keys (that is,
the KLK, MS key, and DUKPT key)
IPP MS DUKPT C
AND OMMUNICATIONS
Transmit
IPP
Direction
ACK if LRC
•
NAK if LRC incorrect
•
EOT after 3 NAKs
•
<SI>17[KMM][PINER]<SO>{LR
C}
EOT to terminate process.
The IPP saves the new key
management accordingly.
X
M 800 S P
ERIES ROGRAMMERS
P
ACKETS
Common Packets
303
G
UIDE