Table of Contents

Set management key

Command APDU Info

CLA INS P1 P2 Lc Data Le
00 FF FF touch policy 1B new key data (absent)

The touch policy is either FF (no touch required) or FE (touch required) or FD for cached.

The new key data is formatted as follows

  03 9B 18 <24 binary bytes>

  03 means Triple-DES
  9B indicates slot 9B (where the management key resides)
  18 is the length (0x18 = decimal 24)

Response APDU Info

Response APDU for SET MANAGEMENT KEY (success)

Total Length: 2
Data Length: 0

Data SW1 SW2
(no data) 90 00

Response APDU for SET MANAGEMENT KEY (authentication failed)

Total Length: 2
Data Length: 0

Data SW1 SW2
(no data) 69 82

Examples

$ opensc-tool -c default -s 00:a4:04:00:09:a0:00:00:03:08:00:00:10:00
  -s 00:FF:FF:FF:1B:03:9B:18:01:02:03:04:05:06:07:08:
                             08:07:06:05:04:03:02:01:
                             08:07:06:05:04:03:02:01
Using reader with a card: Yubico YubiKey OTP+FIDO+CCID 0
Sending: 00 A4 04 00 09 A0 00 00 03 08 00 00 10 00
Received (SW1=0x90, SW2=0x00):
61 11 4F 06 00 00 10 00 01 00 79 07 4F 05 A0 00
00 03 08
Sending: 00 FF FF FF 1B 03 9B 18 01 02 03 04 05 06 07 08 08 07 06 05 04 03 02 01 08 07 06 05 04 03 02 01 
Received (SW1=0x69, SW2=0x82)
Edit this page