ICT Protege - Card Linkage Configuration; CSN Reading Mode; PSK Decryption Setup

Bluetooth:
⦁ Keyslot: The keyslot to use for creating the encrypted session
⦁ Key Number: The key number being sent in the challenge packet to the mobile device
Card Linkages
The Card Linkages TLV is used for linking credential types to custom card formats and encryption keys.
When the reader finds a credential that it can read, the linkage configuration specifies where to find the custom
card formats and encryption keys to interpret that credential type, and how the card data is encrypted.
Changing this setting has the potential to render the reader unusable.
⦁ Linkage Slot: The card linkage slot where the linkage configuration will be stored
⦁ Flags: The decryption method to use:
- AES 256 Decryption: If enabled, the reader expects data on the card to be encrypted with AES 256 in
addition to the security on the card itself (e.g. MIFARE crypto1/DESFire key).
- AES 256 Decryption CBC: If enabled, the reader expects data on the card to be encrypted with AES 256
with Cipher Block Chaining in addition to the security on the card itself.
- AES IV In First Block: If enabled, the reader expects the IV (Initialization Vector) to be in the first block
received from the card. Otherwise, it initializes the IV with all zeros.
- Serial Diversified: If enabled, the reader expects the key for the encryption above to be diversified against
the card serial number.
⦁ Keyslot: The keyslot to link the custom encryption keys that will be used to authenticate the access credential
⦁ Access Credential Slot: The slot to link the Access Credential configuration
⦁ Format Slot: The Custom Card Format Slot to link the custom format string which describes how to interpret
data from the card being read
CSN Reading Mode
The CSN Reading Mode TLV is used to enable/disable CSN (Card Serial Number) reading for MIFARE, DESFire and
other NFC cards.
⦁ CSNReading Mode:
- Mifare CSN (ISO14443a3)
- Mifare CSN Reversed (ISO14443a3)
- ISO 14443-4 CSN (DESFire)
- ISO 14443-4 CSN Reversed (DESFire)
- ISO15693 CSN: This is a legacy option. ISO15693 CSN capable cards are no longer supported
- ISO15693 CSN Reversed: This is a legacy option. ISO15693 CSN capable cards are no longer supported
The reader will first attempt to read the card using the encoded access credential before reading CSN. CSN
will only be sent from the reader if the card cannot be read using any of the configured credentials.
PSKDecryption
Enable the reader to read PSK formatted Kantech, Tecom or Motorola cards for PSK capable readers.
PSK card formats require specific hardware to operate.
⦁ PSKDecryption:
- Raw Decoding: Reads raw data. Does not attempt to decrypt.
- Kantech
- Tecom
- Motorola T1
ICT Card Reader | Configuration Guide 15