AAL2DPXGetTokenBLOBsEx2

Function prototype

aat_int32 AAL2DPXGetTokenBlobsEx2(
                                  TDPXHandle*        dpx_Handle
                                  TKernelParms*      CallParms,
                                  aat_ascii          Serial[11],
                                  aat_int16*         Appl_count,
                                  aat_ascii          Serial_Appli[8][23],
                                  aat_ascii          TokenType[6],
                                  aat_ascii          AuthMode[8][3],
                                  TDigipassBlob      DPData[8],
                                  aat_int32*         SeqNumThreshold,
                                  aat_ascii*         ActivationVector,
                                  aat_int32*         ActivationVectorLen,
                                  aat_ascii*         PKBlob,
                                  aat_int32*         PKBlobLen);

Description

This function is used to import all the application BLOBs of one Digipass authenticator in a single call (each application BLOB is stored in the DPData array parameter).

The name of each application is concatenated with the Digipass serial number and returned in the Serial_Appli array. In the same way, the authentication mode to use for each authenticator application is returned in the AuthMode array. The physical Digipass device type is returned in TokenType.

The number of authenticator application BLOBs requested/returned is described in the application count. If the dpx_Handle contains more than one Digipass authenticator, AAL2DPXGetTokenBlobssEx2 must be called several times to import all Digipass authenticators.

This function replaces and extends the former function AAL2DPXGetTokenBlobsEx to support traditional single-device licensing DPX files containing for each Digipass authenticator a payload key in addition to some traditional Digipass applications. For more information, refer to the Authentication Suite Server SDK Product Guide.

The usage of the former functions AAL2DPXGetToken, AAL2DPXGetTokenBlobs, and AAL2DPXGetTokenBlobsEx is no longer recommended.

In case of DPX files containing master activation licenses (in the context of multi-device licensing), the function AAL2DPXGetTokenBlobsEx2 will allow importing a master activation application BLOB, the associated activation vector, and the associated sequence number threshold from a DPX file:

• The master activation application BLOB and the associated activation vector are involved in the activation process of the Digipass instance related to a particular license of the imported DPX file.
• The activation vector holds some parameters for Activation Message 1 that will be generated afterwards by Authentication Suite Server SDK for a particular license.
• The sequence number threshold is a number from 1 to 99, indicating the number of instances which can be activated from the license. This is configured by OneSpan at the time of order.

The function AAL2DPXGetTokenBlobsEx2 must be called several times to import all Digipass authenticators from a DPX file, one time for each serial number.

In case of DPX containing payload key, each call of AAL2DPXGetTokenBlobsEx2 will return one payload key BLOB for each Digipass authenticator.

If the Digipass authenticator uses the Secure Channel feature but the DPX does not contain payload key (case of Digipass post-provisioned), the function call to AAL2DPXGetTokenBlobsEx2 will not return any payload key BLOB. The payload key BLOBs must be generated in this case using AAL2GenPayloadKeyBlob function.

No payload key BLOB will be imported or must be generated if the Digipass authenticator does not support the Secure Channel feature.

AAL2DPXGetTokenBlobsEx2 returns 107 when the last Digipass authenticator has been imported.

After importing all Digipass authenticators from a DPX file the function AAL2DPXClose must be called.

Parameters

Return codes