Extended Command 0X0309 - Modify Acquirer Public Key Capk (Mac, Emv Oda Only) - Magtek mDynamo Programmer's Manual

7 - Commands
7.4.11 Extended Command 0x0309 - Modify Acquirer Public Key CAPK (MAC, EMV ODA
Only)
Like all extended commands, the host initiates this command by calling Command 0x49 - Send
Extended Command Packet (Extended Commands Only), and receives a response as documented
there.
This command is used to modify CA Public Keys, which are specified by each of the payment brands and
which the device can use to perform offline data authentication (ODA) to authenticate data from a chip
card or contactless card or payment device on its own, in cases where network access to a payment
processor is not available. See Extended Command 0x030A - Read Acquirer Public Key CAPK
(EMV ODA Only) for details about storage of keys.
(Fixed Key Only)
If the device is configured to use fixed key encryption using Property 0x6B - Key Management Scheme
(Fixed Key Only) or the device's security level is less than 3, then MACing is not required. In this case,
the Device Serial Number and MAC fields can be set all zeroes.
Configuration changes will be lost after a power cycle or reset unless the host sends Extended
Command 0x030E - Commit Configuration after making all configuration changes.
Table 7-30 - Request Data for Extended Command 0x0309 - Modify Acquirer Public Key CAPK (MAC,
EMV ODA Only)
Offset Field Name
0 Type of MAC
1 Slot Number
2 Operation
Database
3
Selector
Device Serial
4..19 Number
(DSN)
Objects to
20..n
Write
mDynamo| OEM Secure Card Reader Authenticator | Programmer's Manual (COMMANDS)
MAC algorithm designator
0x00 = MSV5 MSCI CBC-MAC
CA Public Key Slot Number = Any value from 0x01 to 0x33 inclusive
0xFF = Next Available (slot with RID TLV length set to zero)
If the Operation field is set to Erase All, this field is not used and can be set to
any value.
0x00 = Erase All (Erases all tags in all CAPK slots). This sets the TLV length
of every TLV data object in each slot to 1 and the value to 0. A slot is
considered erased and available for use by the Next Available Slot Number
(0xFF) if its RID TLV length is set to 1 and its value is set to 0.
0x01 = Writes a CA Public Key. To erase a single slot, write all of the slot's
tags' TLV lengths to 1 and values to 0.
(Contact Only)
0x00 = EMV Contact L2
16 Bytes DSN
Note: Not needed if Operation is 0x00 Erase All.
FA<len> /* container for generic data */
< DFDF79><len><value> /* RID */
< DFDF7A><len><value>/* Index */
< DFDF7B><len><value>/* Modulus */
< DFDF7C><len><value>/* Key Exponent */
< DFDF7D><len><value> /* Checksum */
Page 79 of 167 (D998200151-200)
Value