Mobile Smart Card Profiles

Note: Support for Mobile Smart Cards has been deprecated starting with ActivID CMS 5.4.

CIV - AI 2048 Crescendo Mobile Profile

CIV profile, with extended PKI, for Crescendo Mobile

  • Unique Identifier (stored in the card): 201100000000000000000137

  • 9 2048-bit keys PIV PKI Objects (PIV Authentication, PIV Digital Signature, PIV Key Management Key, PIV Card Authentication, 5 Retired Key Management Keys) loaded by ActivID CMS

  • 7 2048-bit keys PKI Objects loaded by ActivID CMS

  • PIV EP Buffer Objects, except Iris

  • PIV AUTHENTICATION, CHUID and Printed Information objects are mandatory. All other objects are optional.

  • PIN Numeric Only

  • In addition to the card pre-issuance keys, the following keys must be present in the HSM for profile issuance. As these keys are post-issuance keys, they should be generated in the HSM:

    • MK_CM_ACE_AES_16_MSC_1_ENC, _MAC, _KEK (16-byte AES keys)

    • MK_ID_ACE_UNLCK_1_TRIPLE_MSC (24-byte DES keys)

Supported Devices

Supported Pre-Issuance IDs

Mobile Devices (for Crescendo Mobile)

Description

HID Crescendo Mobile

Manufacturer Key Set

VOP_ISK_AES_16_1_ENC

VOP_ISK_AES_16_1_MAC

VOP_ISK_AES_16_1_KEK

Diversification

NONE

Key Set Version / Index

0x01/0x00

Logical Scheme

2

ManufacturerID

HID-01

CardProductID

MSC_CRESCENDO_MOBILE

PhysicalDescriptionID

WHITE_CARD

PackageConfigID

FREE

RequirementID

MSC

KeyConfigID

VOP_ISK_AES_16

LogicalDescription

6010000001