8 - Commands
eDynamo| Secure Card Reader Authenticator | Programmer’s Manual (COMMANDS)
Page 75 of 245 (D998200115-17)
8.3.7 Command 0x11 - Activation Challenge Response (MSR Only)
This command is used as the second part of an Activate Authentication sequence following Command
0x10 - Activate Authenticated Mode. In this command, the host software sends the first 6 bytes of
Challenge 1 (received in response to Command 0x10 - Activate Authenticated Mode) plus two bytes of
timeout information, and (optionally) an eight byte Session ID encrypted with the a custom variant of the
current DUKPT Key (Key XOR 3C3C 3C3C 3C3C 3C3C 3C3C 3C3C 3C3C 3C3C).
The time information contains the maximum number of seconds the device should remain in
Authenticated Mode. Regardless of the value of this timer, a card swipe in the Authenticated Mode ends
the Authenticated Mode. The maximum time allowed is 3600 seconds (one hour). For example, for a full
hour, use 0x0E10; for 3 minutes, use 0x012C. A value of 0x00 forces the device to stay in
Authenticated Mode until a card swipe or power down occurs (no timeout).
If the host includes Session ID information and the command is successful, it changes the Session ID in
the device in the same way as calling Command 0x0A - Set Session ID.
If the device decrypts the Challenge Response correctly, Activate Authenticated Mode has succeeded. If
the device can not decrypt the Challenge Response correctly, Activate Authenticated Mode fails and the
TDES DUKPT Key Serial Number advances.
Table 8-13 - Request Data for Command 0x11 - Activation Challenge Response (MSR Only)
First 6 bytes of Challenge 1 plus a two-byte timeout (MSB first), encrypted
by the specified variant of the current DUKPT Key.
Optional eight byte Session ID encrypted by the specified variant of the
current DUKPT Key.
Response Data: None
Result codes:
0x00 = Success
0x02 = Bad Parameters - the Data field in the request is not a correct length
0x04 = Bad Data - the encrypted reply data could not be verified
0x07 = Sequence - not expecting this command
Example Request (Hex)
Example Response (Hex)