I have developed a Java card applet for a client, and now he wants me to enable the diversification algorithm for Visa2 Key on his cards. I have never participated in deploying applets on cards, so for me this is a new concept. The tool that I sometimes use to download the applet to the map is gpj, and here the command line with the cards of my clients is used:
java -jar gpj.jar -mode ENC (-delete/-load/-install/-list/etc...)
This causes gpj to use the global keys of the Global Platform ( 404142434445464748494A4B4C4D4E4F) platform to open a secure channel with a secure domain on maps ( A0 00 00 00 03 00 00 00).
An applet appeared on one of the cards, already installed on it as a sample card, and when I tried the above command with the parameter -list, I got the error "Card cryptogram error" from gpj. After some trial and error, I was able to authenticate to the security domain with this command:
java -jar gpj.jar -mode ENC -visa2 (-delete/-load/-install/-list/etc...)
Thus, it seems that Visa2 key diversification can be turned on and off on my cards. My question is: how can I achieve this?
source
share