DK Migrate PIN (CSNBDMP)

Edit online

Use the DK Migrate PIN verb to generate the PIN reference value (PRW) for a specified user account. The PIN reference value is used to verify the PIN in other services.

An ISO-1 formatted PIN block is input to determine the value of the PIN for the account. The PIN is reformatted into a DK-defined PIN block and the PIN reference value is calculated using a PRW random value and other account information. The PIN reference value and associated PRW random value are returned to be used as input by other PIN processes to verify the PIN.

If validation of the PIN is desired to personalize smart cards, specify the EPB rule-array keyword. This keyword causes an output encrypted PIN block to be returned along with a PIN block MAC. The MAC is calculated over the output PIN block and additional card data using the block cipher-based MAC algorithm called CMAC (NIST SP 800-38B).

Notes:

  1. This service does not test for weak PINs.
  2. This verb supports PCI-HSM 2016 compliant-tagged key tokens.

This verb does not need to document any Usage notes.