Display smart card information

After you have created a smart card, you are advised to check the results. If you are copying keys from one smart card to another, you might also want to verify that all of the keys were correctly copied to the other smart card.

Insert the smart cards to be displayed in the smart card readers. From the File menu, click Display smart card information.

Figure 1. Display smart card information

The panel provides the following information about the smart card:

Card type: Identifies the type and applet version of the smart card in the reader. TKE supports CA, TKE, EP11, MCA, IA, and KPH smart cards.
Card ID: A 9-digit identifier that is generated when the smart card is initialized.
Card description: The description that you entered when creating the smart card. Can be 30 characters in length.
PIN status: Can be OK, Blocked, or Not set.
Authority or Administrator key: For TKE smart cards, displays the authority index and name. For EP11 smart cards, displays the administrator name.
Crypto Adapter Logon Key: For TKE and EP11 smart cards, the value is Present or Not Present.
Zone enroll status: Indicates whether the smart card is enrolled in a primary zone. It is either Enrolled or Not enrolled.
Zone ID: The zone ID from the CA or MCA smart card that is used to initialize and enroll the smart card. This is the zone ID of the primary zone.
Zone Description: The optional zone description from the CA or MCA smart card that is used to initialize and enroll the smart card. This is the zone description of the primary zone. Can be up to 12 characters in length.
Zone key length: The length in bits of the modulus of the public key that defines the primary zone.
Alternate zone enroll status: Indicates whether the smart card is enrolled in an alternate zone. The status is Enrolled or Not enrolled, or blank if the smart card does not support an alternate zone.
Alternate zone ID: The zone ID from the CA smart card that is used to establish an alternate zone. Blank if the smart card does not support an alternate zone or if the smart card is not enrolled in an alternate zone.
Alternate zone description: The optional zone description from the CA smart card that is used to establish an alternate zone. Blank if the smart card does not support an alternate zone or is not enrolled in an alternate zone.
Alternate zone key length: The length in bits of the modulus of the public key that defines the alternate zone. Blank if the smart card does not support an alternate zone or is not enrolled in an alternate zone.

Only TKE and EP11 smart cards store key parts, so fields in the Key parts table are filled in only for these smart card types.

Key type: Operational key parts, TKE crypto adapter master key parts, or ICSF master key parts.
Description: Description of key part (optional).
Origin: Crypto Adapter or PIN-PAD.
MDC-4: MDC-4 hash value of the key part.
SHA-1: SHA-1 hash value of the key part.
ENC-ZERO: ENC-ZERO hash value of the key part.
AES-VP: AES verification pattern of the key part.
Control vector or key attributes: For DES operational key parts and AES DATA operational key parts, contains the control vector. For AES non-DATA operational key parts, indicates whether the key part uses the default key attributes or custom key attributes. Blank for master key parts.
Length: 8, 16, 24 or 32 bytes.