DK Deterministic Generate (CSNBDDPG)
Use the DK Deterministic Generate service to generate a PIN and PIN reference value or word (PRW) using an AES PIN calculation key. The PIN reference value is used to verify the PIN in other services.
Note: The PIN generation process uses the account information to calculate the PIN. If the
process generates a PIN that appears in the weak PIN table, it rejects that PIN, increments
the rightmost byte of the account information by 1, and generates another PIN. The PIN
generation process continues to increment the byte until an acceptable PIN is generated. For
additional information, see Weak PIN table.
You can use this service to perform the following tasks:
- Generate an encrypted PIN block in PBF-1 format with a PIN print key to be printed on a PIN mailer.
- Generate a PRW which can be used to verify the PIN.
- Optionally, generate an encrypted PIN block in PBF-1 format to be stored for later use in personalizing replacement cards.
Weak PINs: The PIN generation process uses the account information to calculate the PIN. During the PIN generation process, if a generated PIN is found in the weak PIN table, it is rejected; the process increments the rightmost byte of the account information by 1 and generates another PIN. The process repeats itself until a suitable PIN is generated.
Note: This verb supports PCI-HSM 2016
compliant-tagged key tokens.
This verb does not need to document any Usage notes.