GET PIV PROPERTIES

Command Description

The GET PIV PROPERTIES command is used to retrieve the maximum number of supported PKIs.

Instance: PIV

Access Condition: Always

Command Message

The following table lists the coding for the GET PIV PROPERTIES command message.

CLA

00h

INS

CBh

P1

3Fh

P2

FFh

Lc

05h

Data Field

5C03FFFF7F

Le

00h

Response Message

The data field in the response message contains the PIV properties. It is composed of tags coded to the BER TLV format. Each PKI is represented by its #51 tag; it is thus possible to retrieve the number of supported PKIs by counting the number of #51 tags.

Data Field Returned in the Response Message for GET PIV PROPERTIES

Length Value Description

01h

53h

Data Object tag

02h, 03h

This length is coded as follows:

  • 81h80h… 81hFFh from 128 to 255 bytes,
  • 82h01h00h….FFhFFh from 256 bytes to 65535 bytes

Data Object Length (BER-TLV format)

07h

Tag #1

 

03h

Tag #39

 

09h

Tag #3A

 

02h

Tag #3B

 

0Eh

First #50 tag

 
 

...

 

0Eh

Last #50 tag

 

17h

First #51 tag

PKI Object Properties

 

...

 

17h

Last #51 tag

PKI Object Properties

07h

Tag #45

 

Processing State Returned in the Response Message

The following table lists the processing state returned in the response message.

Status Meaning

6A86h

Incorrect P1/P2 (P1≠3Fh or P2≠FFh)

61LLh

Command succeeds, where ‘LL’ encodes the number of response data bytes still available that can be retrieved by issuing a GET RESPONSE command

9000h

Successful execution: No more data available