Thales HSM Encrypt Clear Pin

[Pledges]

So I am new to HSM encryption. We have a Thales PayShield 9000 HSM at work and the requirement is to encrypt a clear PIN using the ISO 9564 Format 0 standard.

What I have is the following:

Clear PIN:  1111

PAN: 6999999999999992

PIN Encryption Key (32):  XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX 

My requirement is to use the BA hsm command to encrypt PIN 1111 to get a 16  hex Pin Block. I have tried

00000000BA041111FFFFFFFFFF999999999999XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

But I got response 15 , can someone advise what I am doing wrong.

[Andrés Alcarraz]

Hi Pledge, the BA command doesn't receive a PIN encryption key.

Other than that there may also be other thins out of sync with the HSM configuration, like the header and the max pin length

But  for sure the XXXXs don't go, because the BA command is to encrypt under the LMK.

Regards

---

Andres Alcarraz | Transactility, Inc.  | Lima, Perú| e: a...@transactility.com | t: +51 914498384 | sk: alcarraz1976

El 16/6/21 a las 12:38, Pledges escribió:

--
--
jPOS is licensed under AGPL - free for community usage for your open-source project. Licenses are also available for commercial usage. Please support jPOS, contact: sa...@jpos.org
---
You received this message because you are subscribed to the Google Groups "jPOS Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jpos-users+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jpos-users/e4fd89bb-551f-4847-8530-c37140ca14ebn%40googlegroups.com.