Magtek mDynamo Programmer's Manual page 29

4 - Security Levels
•
Y means the command can run at the specified security level.
•
N means the command is prohibited at the specified security level.
•
C means the customer may specify Y or S for that command when ordering.
•
S means the command is secured [may require MACing, see section 4.1 About Message
Authentication Codes (MAC)]. (Fixed Key Only) If the device is configured to use fixed keys
instead of DUKPT key management using Property 0x6B - Key Management Scheme (Fixed Key
Only), commands marked with S do not require MACing.
•
* indicates Command 0x02 - Reset Device has special behavior. If an Authentication sequence has
failed, only a correctly MACed Command 0x02 - Reset Device (MAC) can be used to reset the
device. This is to prevent a dictionary attack on the keys and to minimize a denial of service (DoS)
attack.
Table 4-1 - Command Behaviors At Each Security Level
Any command that is not listed in this table works the same at all Security
Levels.
Command 0x01 - Set Property (MAC)
Command 0x02 - Reset Device (MAC)
Command 0x15 - Get / Set Security Level (MAC)
Extended Command 0x0300 - Initiate EMV Transaction (EMV Only)
Extended Command 0x0302 - Cardholder Selection Result
Extended Command 0x0303 - Online Processing Result / Acquirer Response
(EMV Only)
Extended Command 0x0304 - Cancel Transaction (EMV Only)
Extended Command 0x0305 - Modify Terminal Configuration (MAC)
Extended Command 0x0307 - Modify Application Configuration (MAC)
Extended Command 0x0309 - Modify Acquirer Public Key CAPK (MAC,
EMV ODA Only)
Extended Command 0x030C - Set Date and Time (MAC)
Extended Command 0x030E - Commit Configuration
Extended Command 0x0310 - Modify EMV Configuration (MAC, Contact
Only)
mDynamo| OEM Secure Card Reader Authenticator | Programmer's Manual (COMMANDS)
Command
Page 29 of 167 (D998200151-200)
Level 2 Level 3
Y Y
Y S
Y *
S S
N Y
N Y
N Y
N Y
N S
N S
N S
N S
N Y
N S