Smart Card Management
Manages the smart card operational lifecycle.
Info
For backward compatibility reasons, the system accepts PIN input with alphanumeric characters. Internally, these characters are mapped to a physical PIN, which allows different logical PINs to be interchangeable.
- Inspect: displays specific information about the smart card currently in the reader, including its serial number, the SCR (Secret Code Ratification) counter, the MMPN (Mode Maximum Presentation Number), PIN Lock status, ATR (Answer To Reset) string, and other details.
-
Change PIN: changes the protection PIN of the M of N part of the Server Master Key on the card.
The PIN must be 8 (eight) characters long. This PIN is stored with 04 bytes on the card, using the least significant nibble of each character and discarding the rest. It is recommended to use only digits (decimal numbers 0-9) for greater compatibility with different platforms.
-
Create Server Master Key: generates a new SVMK (Server Master Key).
- Erase: deletes existing information on the card, such as SVMK, SVMK Shadow, PINs, etc., and leaves the card in a post-formatting state.
- Create Partition Auth Set: creates an M-of-N smart card set to be used for partition authorization.
- Get Label: displays the card's label (if present), which was created during the set generation. The PIN must be provided to access the label.
- Copy Set: copies an M-of-N card set to another set. The M-of-N scheme in both sets can be different.
- Copy Card: performs a physical copy of the card. Both cards must use the same PIN.
Attention
For security reasons, the smart card PIN can only be changed once. Once the PIN has been changed, the memory area of the card containing this information is sealed and can no longer be altered or tampered with.
Refer to the Initialization section for more information on smart cards.
Dinamo - Local Management Console
┌─────────┤ Smart Card ├──────────┐
│ ◂ │
│ Inspect │
│ Change PIN │
│ Create Server Master Key │
│ Erase │
│ Create Partition Auth Set │
│ Get Label │
│ Copy Set │
│ Copy Card │
└─────────────────────────────────┘
Service running... Replication Domain: <none>The screen below shows an example of information that can be obtained from a smart card using the Inspect option, such as the card's serial number (CSN), the PIN locking status indicating whether the card's PIN can still be changed, and the smart card format.
Whenever a card is used in the HSM, the event is recorded in the log, along with the serial number and label assigned, which allows for a very detailed level of auditing.
Dinamo - Local Management Console
┌────────────────────────────┤ ├─────────────────────────────┐
│ │
│ ATR : 3B:7A:94:00:00:80:65:A2:01:01:01:3D:72:D6:43 ↑ │
│ CSN : 15C000E3A8171006F00FF0010 ▒ │
│ Family : Gemplus Generic Product ▒ │
│ Card Name : GemXpresso Pro R3.x ▒ │
│ Card OS : OSv09 ▒ │
│ Prog Ver : 01 ▒ │
│ Chip Ver : 38 ▒ │
│ LOCK1 byte : 02 ▒ │
│ LOCK2 byte : 02 ▒ │
│ Card Type : SmOe ▒ │
│ PIN Locked : no (one more PIN change allowed) ░ │
│ PIN SCR : 0 ↓ │
│ │
│ ┌────┐ │
│ │ OK │ │
│ └────┘ │
│ │
│ │
└─────────────────────────────────────────────────────────────┘
Service running... Replication Domain: <none>