payShield host commands

PIN operations

payShield CI — Translate PIN DUKPT→ZPK

answers with CJ

Translate a PIN from a DUKPT-derived key to a ZPK

Fields

FieldWhat it holds
BDK under LMK32 or 97 or 129 charsS… BDK key block (97/129 chars), or 32 hex under a variant LMK
ZPK under LMK32 or 48 or 97 or 129 charsS… key block (97/129 chars); CA: a BDK block (usage B0/41) selects DUKPT — '*' is the variant-LMK flag
KSN Descriptor3 chars3 hex: BDK-id len / reserved / device-id len (e.g. A05) — BDK destination only
Key Serial Number20 chars20 hex digits — BDK/DUKPT path only
PIN Block (HEX)16 or 32 chars16 hex chars, or 32 for format 48
Destination PIN Block Format2 charsdefaults to the source format
PAN12-19 digit card number

On the wire

Complete host messages. Each runs against the KeyLab simulator as printed. The header is four zeros here; the device echoes back whatever you send.

Translate PIN DUKPT→ZPK

0000CIS10096B0TE00N0000EE37F83E9258D4FCEB4E3237826F2CB0448889847058BACD30000834C30E2CD1D36EE41BDF56D8C3S10096P0TE00N00004648B9AA7F4428AADA1F0FAF8F1F5CD4A7857B6300AC04678A05A8989368E22F903C80379DD51A0EA05BC75601102A00040001F09D9DA9923F5461A01234567812345;

4-char headercommand248 chars of fields
Send CI to the simulator

Opens the simulator with this command already filled in.

PIN operations