This function is used with a Digipass authenticator that can use encrypted static passwords (e.g. Digipass 110). It utilizes an operating mode compliant only with the software authenticator Digipass 110 and will not work with hardware authenticators, as for example Digipass GO 1. Thus, administrators can provide a new static password in an encrypted format on a mandatory basis. As this function is critical, only an authenticated user should be able use it.
Unlike AAL2ChangeStaticPassword, AAL2ChangeEncryptedStaticPassword does not contain the new static password as clear-text parameter. The new static password is encrypted in the change-encrypted-static-password request.
authenticator application BLOB. Upon return from the function call, this BLOB must be rewritten to the application database to reflect changes.
TKernelParms *
CallParms
I
Structure of runtime parameters to use during this function call.
aat_ascii *
Challenge
I
String of 16 numeric characters, left-justified, null-terminated or right-padded with spaces. This parameter holds the challenge that was proposed to the user to generate the CESPR. This parameter is mandatory.
aat_ascii *
CESPR
I
16 hexadecimal characters, left-justified, null-terminated or right-padded with spaces. This parameter is the change-encrypted-static-password request generated by the Digipass 110 applet.