Thales payShield 10K Installation And User Manual page 234

Secure>
Example 4: All settings affecting PCI HSM compliance have compliant values
Secure> CS
Please make a selection.
Press ENTER to keep the current setting.
PIN length [4-12](4):
Echo [oN/ofF](ON):
Atalla ZMK variant support [oN/ofF](ON):
Transaction key scheme: Racal, Australian or None? [R/A/N](R):
<Return>
User storage key length [S/D/T/V](SINGLE):
Display general information on payShield Manager Landing page?
[Y/N]: Y
Default LMK identifier [0-4](0):
Management LMK identifier [0-4](0):
LMKs must be erased before remaining parameters can be set
Erase LMKs? [Y/N]: Y
Select clear PINs? [Y/N](YES):
Enable ZMK translate command? [Y/N](YES):
Enable X9.17 for import? [Y/N](YES):
Enable X9.17 for export? [Y/N](YES):
Solicitation batch size [1-1024](5):
Single/double length ZMKs [S/D](DOUBLE):
Decimalization table Encrypted/Plaintext [E/P](P):
Enable Decimalization Table Checks? [Y/N](YES):
PIN encryption algorithm [A/B](A):
Use default card issuer password [Y/N](YES): Y
Authorized State required when importing DES key under RSA key?
[Y/N](YES):
Minimum HMAC key length in bytes [5-64](10):
Enable PKCS#11 import and export for HMAC keys [Y/N](YES):
<Return>
Enable ANSI X9.17 import and export for HMAC keys [Y/N](YES):
<Return>
Enable ZEK/TEK encryption of ASCII data or Binary data or None?
[A/B/N] (N):
Restrict Key Check Values to 6 hex chars [Y/N](YES):
Enable multiple authorized activities [Y/N](NO):
Allow persistent authorized activities [Y/N](NO):
Enable support for variable length PIN offset [Y/N](NO):
Enable weak PIN checking [Y/N](YES):
Enable PIN Block Format 34 as output format for PIN Translations
to ZPK [Y/N](NO):
Enable translation of account number for LMK encrypted PINs
[Y/N](YES):
Use HSM clock for date/time validation? [Y/N](YES):
Additional padding to disguise key length? [Y/N](NO):
Key export and import in trusted format only? [Y/N](NO):
Protect MULTOS cipher data checksums? [Y/N](YES):
Enable Key Scheme Tag 'X' (X9.17) for storing keys under LMK?
[Y/N](NO):
Enable use of Tokens in PIN Translation? [Y/N](NO):
©Thales Group
All Rights Reserved
payShield 10K Installation and User Guide
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
The current setting is in parentheses.
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
<Return>
Page 232