ANSI X9.8 PIN restrictions

Edit online

These access control points implement the PIN-block processing restrictions of the ANSI X9.8 standard. They are disabled in the default role. A TKE Workstation is required to enable them.

These are the access control points:

ANSI X9.8 PIN - Enforce PIN block restrictions (offset X'0350'). See ANSI X9.8 PIN - Enforce PIN block restrictions.
ANSI X9.8 PIN - Allow modification of PAN (offset X'0351') See ANSI X9.8 PIN - Allow modification of PAN.
ANSI X9.8 PIN - Allow only ANSI PIN blocks (offset X'0352') See ANSI X9.8 PIN - Allow only ANSI PIN blocks.
ANSI X9.8 PIN - Use stored decimalization tables only (offset X'0356') See Use stored decimalization tables only.

These verbs are affected by these access control points:

Clear PIN Generate Alternate (CSNBCPA)
Encrypted PIN Generate (CSNBEPG)
Encrypted PIN Translate (CSNBPTR)
Encrypted PIN Verify (CSNBPVR)
Secure Messaging for PINs (CSNBSPN)

PIN decimalization tables can be stored in the cryptographic coprocessor for use by CCA verbs. Only tables that have been activated can be used. A Trusted Key Entry workstation is required to manage the tables in the coprocessors.