Aug 12, 2014 at 12:57 AM
Edited Aug 14, 2014 at 9:14 PM

I able to generate TMK & TPK using TMK and on the POS terminal I am to form the pinblock & now we need to translate pin block encrypted under TPK to ZPK but I am getting error code 24 from HSM.
Aug 12, 2014 at 11:39 AM
Edited Nov 16, 2014 at 11:29 PM

When you are generating PIN key using HC command for POS terminal you should use ANSI scheme 'X' for exported key as in example below:
If you are using Variant scheme 'U' for key under TMK the resulting key decrypted by terminal will be different than you are expecting. Thales Variant scheme a bit transforms LMK or TMK / ZPK to encrypt different types and lengths of keys. 'X' scheme is the correct one to get the same key on terminal and host sides. On host side (application) you should keep the key under LMK in 'U' scheme.

Marked as answer by Manshtein on 8/21/2014 at 6:34 AM