z/OS Cryptographic Services ICSF Application Programmer's Guide
Previous topic | Next topic | Contents | Index | Contact z/OS | Library | PDF


ANSI X9.8 PIN - Enforce PIN block restrictions

z/OS Cryptographic Services ICSF Application Programmer's Guide
SA22-7522-16

When ANSI X9.8 PIN - Enforce PIN block restrictions access control point is enable, the following restrictions will be enforced.

  • CSNBPTR and CSNBSPN will not accept IBM 3624 PIN format in the output profile parameter when the input profile parameter is not IBM 3624.
  • CSNBPTR will not accept ISO-0 or ISO-3 formats in the input PIN profile unless ISO-0 or ISO-3 is in the output PIN profile.
  • CSNBPTR and CSNBSPN will not accept ISO-1 or ISO-2 formats in the output profile parameter when the input profile parameter contains ISO-0, ISO-3, or VISA4
  • When the input profile parameter of CSNBPTR or CSNBSPN contains either ISO-0 or ISO-3 formats, the decrypted PIN block will be examined to ensure that the PAN within the PIN block is the same as the PAN which was supplied as the input PAN parameter, and that this is the same as the PAN which was supplied as the output PAN parameter.
  • The input PAN and output PAN parameters of CSNBPTR or CSNBSPN must be equivalent.
  • When the rule array for CSNBCPA contains VISA-PVV, the input PIN profile must contain ISO-0 or ISO-3 formats.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014