New Post: Importing CVK and PVK
Hello, I have CVK and PVK encrypted under ZMK, I need to import these keys under LMK so, I'm using IV command from the HSM console but whenever I enter the ZMK I receive key parity error. I have MDK,...
View ArticleNew Post: ZPK/ZMK/LMK
Hi, Can anyone explain me the concepts of ZPK under LMK and ZPK under ZMK? Which of these needs to be stored in database? I am really confused between these two encrypted keys?__ Regards, Karna Nair
View ArticleNew Post: How to interact with HSM using JAVA
Hi Amrutansu, Sorry for long silence, You are forgetting to add software header (message length) to command, OutputStream do not add it itself. If you want to use OutputStream just add the length of...
View ArticleNew Post: Translating Pin Block Under ZPK
Hi, If you mean you are acquirer (or just forwarder of PIN-block) and need to translate PIN-block from your ZPK to shared with issuer ZPK, you should use CC host command described in Host Command...
View ArticleNew Post: Exporting LMKs from Thales 9000 to Thales 8000
Hi, You are unable to export LMKs from HSM. HSM will newer return it. You should have the LMK components on smart cards. You can use the same cards from HSM 8000 to install the LMK on PS9000. The old...
View ArticleNew Post: Translating PIN Block Under Issuer ZPK using Thales Simulator
Hi! 10 error code means "source key parity error". Bascly that means, that you are using incorrect key to decrypt PIN block. Try to verify terminal (source) ZPK using BU host command or KC console...
View ArticleNew Post: Importing CVK and PVK
Hi, The best way to import PVK and CVK is using IK console command. Do not use IV, it is obsolete and requires legacy ZMK. 1) make sure you have correctly formed ZMK using FK command. The 3rd part have...
View ArticleNew Post: ZPK/ZMK/LMK
Hi, You are not first :) I will try to explain (but my English not so good to be clear enough :( ). HSM never works with plain keys, all the keys it processing, are encrypted under other, called Key...
View ArticleNew Post: ARQC/ARPC Verification
Hi, We tried to run KQ command for validating ARQC by sending it to Thales Simulator. Command =...
View ArticleNew Post: FA (translate ZPK from ZMK to LMK) command with single length keys
Has anyone got the FA command to work using single length keys? I get FB10 returned which suggests there is an issue with the ZMK. See example below where I also include the keys and how they were...
View ArticleNew Post: ZPK/ZMK/LMK
In simple words: LMK : MAIN OR MOTHER KEYS. UNDER THIS KEYS ALL THE FUTURE GENERATED KEYS WILL BE SAVED. You need to save this LMKs in the either chip card format of paper. Mostly used it Chip card,...
View ArticleNew Post: generating PIN from components
Hi, I have 2 components, and a KCV value that i need to use to generate a PIN. I have tried the A4 comment, but it gives me Error 10, response code a5 Any Idea what the issue is? Component 1 =...
View ArticleNew Post: Source key parity error
Hi all. The goal is to obtain ISO 0 PIN Block encrypted under ZPK. I'm trying to send the following commands to the simulator via Java: BA/BB JG/JH Application events log:Client from 127.0.0.1:58105 is...
View ArticleNew Post: Source key parity error
Hi, i do not know the reason, may be it always checks the parity. I've checked your key and its parity is not adjusted. Try to use adjusted one UE6A4D315D63932332163FBDA8ECCD2BF Regards
View ArticleNew Post: Font for PIN print
How I can change font for PIN printing with thales payshield 9000?
View ArticleNew Post: Source key parity error
Hi! You have different LMKs, so, the key @mfilippov used on his encironment can not be reused on different HSMs with different LMK. Also, can not be verified. When HSM receivs the key, ed....
View ArticleNew Post: generating PIN from components
Hi, A4 command awaits LMK encrypted components instead of plaintext. Use Simulator FK console command do form key from plaintext components. Regards, Juris
View ArticleNew Post: ARQC/ARPC Verification
Hi, The ARQC verification and ARPC generation is not working correctly in simulator, currently. Regards, Juris
View ArticleNew Post: FA (translate ZPK from ZMK to LMK) command with single length keys
Hi! Check the parameter in ThalesParameters.xml "DoubleLengthZMKs", it should be set to "False" if you want to use single length ZMKs. It is the real HSM "Double ZMK" security parameter analog to...
View Article