« February 13th | Main | The Easter Bunny Effect »

Friday, February 15, 2008

Comments

Feed You can follow this conversation by subscribing to the comment feed for this post.

Hi Andy,
We have a requirement to pre-generate PINs and associate them with a card number later on. We are using Thales-esecurity hsm RG7000.

For pre-generating a PIN we initially supply a running serial number of 12 digits as the PAN. Later, on association with a card number we plan to fire a change pin command on the HSM (we actually need only the PVV as the verification on the card number and the PIN happens on a similarly configured HSM).

We are using the JA comand to generate the PIN, with the running serial number.

We are using the DG command to generate the PVV.

After a card number is linked to the serial number we tried using the DG command (to get the PVV) with the encrypted PIN returned by the JA command. This is returning error number 14 "Error in encrypted PIN".

What am i missing over here? Any inputs, guidance and ideas would be of great help.

Thanks
Srini

The comments to this entry are closed.

AddThis Social Bookmark Button

Resources

  • Alejandro's jPOS Project
    Faced with payment systems challenges? Start here to learn more about Alejandro Revilla's jPOS project.
  • Dave Bergert's Blog
    Insights from my OLS colleague, Dave Bergert, CISSP, CISA, CompTIA Security+, and former Visa-certified QSA.
  • Glenbrook's Blog List
    Glenbrook Partners has compiled "a current summary of the latest content from some of our favorite payments and banking blogs." Dave, Alejandro and I are on the list.
  • soliSYSTEMS
    My friend Roque Solis is our go-to guy for RFID, smart cards, chip cards, integrated circuit cards, HSMs, cryptographic accelerators and public-key cryptography.
  • Specs Online - AMEX
    American Express puts its acquirer specs online for public retrieval.
  • Specs Online - FDMS
    First Data Merchant Services puts its acquirer specs online for public retrieval.
    [NOTE: This repository is accessible only via IE; this link will not work with Firefox or other browsers.]

Documents

  • The PCI Split
    Depicts how we split an implementation into PCI and non-PCI halves.
  • The Virtuous Spiral
    A good payment system unleashes customer creativity. Does yours?
Blog Widget by LinkWithin

  • Your attention to detail is a great asset. Use it wisely.