Display smart card information
After you have created a smart card, you are advised to check the
results. If you are copying keys from one smart card to another, you
might also want to verify that all of the keys were correctly copied
to the other smart card.
- Insert the smart cards to be displayed in the smart card readers. From the File menu, click Display smart card information.
Figure 1. Display smart card
information
The panel provides the following information about the smart card:
- Card type: Identifies the type and applet version of the smart card in the reader. TKE supports CA, TKE, EP11, MCA, IA, and KPH smart cards.
- Card ID: A 9-digit identifier generated when the smart card is initialized.
- Card description: This is the description you entered when creating the smart card. Can be 30 characters in length.
- PIN status: OK, Blocked or Not set
- Authority or Administrator key: For TKE smart cards, displays the authority index and name. For EP11 smart cards, displays the administrator name.
- Crypto Adapter Logon Key: For TKE and EP11 smart cards, the value can be Present or Not Present.
- Zone enroll status: The Zone enroll status is the status of the card. It is either Enrolled or Not enrolled.
- Zone ID: When a CA or MCA smart card is created, the system generates an 8-digit zone number.
- Zone Description: This is the description you entered when creating the CA or MCA smart card. Can be 12 characters in length.
- Zone key length: The length of the zone certificate public modulus in bits.
Only TKE and EP11 smart cards store key parts, so fields in the Key parts table are filled in only for these smart card types.
- Key type: operational key parts, TKE crypto adapter master key parts, or ICSF master key parts
- Description: description of key part (optional)
- Origin: Crypto Adapter or PIN-PAD
- MDC-4: MDC-4 hash value of the key part
- SHA-1: SHA-1 hash value of the key part
- ENC-ZERO: ENC-ZERO hash value of the key part
- AES-VP: AES verification pattern of the key part
- Control vector or key attributes: For DES operational key parts and AES DATA operational key parts, contains the control vector. For AES non-DATA operational key parts, indicates whether the key part uses the default key attributes or custom key attributes. Blank for master key parts.
- Length: 8, 16, 24 or 32 bytes