Thales payShield 10K - Page 201

payShield 10K Installation and User Guide
© Thales Group Page 199
All Rights Reserved
9.15.2 BH Response
The HSM returns the following BH response to the host's BG command:
LMK Identifier 2 N Where the user is using multiple LMKs on the same HSM,
this allows the required LMK to be selected. Minimum value =
'00'; maximum value is defined by license. This field must be
present if the above Delimiter (%) is present. If the field is not
present, then the default LMK will be used.
End Message
Delimiter
1 C Must be present if a message trailer is present. Value X'19'.
Message Trailer n A Optional. The contents of the trailer is as required by the
user, and is returned unchanged in the response. Maximum
length 32 characters.
Field
Length &
Type
Notes
Message Header m A This is a play-back of the header provided in the BG
command.
Response Code 2 A Has the value 'BH'.
Error code 2 N Indicating the general outcome of the BG command:
'00' : No error
'68' : Command disabled
or any standard error code.
PIN L
2
N
Or
L
2
H
The PIN encrypted under the new LMK, where L
2
is the new
encrypted PIN length.
L
2
N applies where PIN encryption algorithm A (Visa method)
is specified in the security settings, and L
2
H applies where
PIN encryption algorithm B (Racal method) is specified.
End Message
Delimiter
1 C Present only if a message trailer is present. Value X'19'.
Message Trailer n A This is simply a play-back of any trailer included in the BW
command.
Field
Length &
Type
Notes