AAL2GenPayloadKeyBlob

Function prototype

aat_int32 AAL2GenPayloadKeyBlob (
                                 TDigipassBlob   *DPMAData,
                                 TKernelParms    *CallParms,
                                 aat_ascii       *MessageVector,
                                 aat_ascii       *PKBlob,
                                 aat_int32       *PKBlobLength);,

Description

This function generates a payload key BLOB embedding a randomly generated payload key.

It is only applicable to hardware or software Digipass authenticators compliant with the multi-device two-step activation (in the context of multi-device licensing). For more information, refer to the Authentication Suite Server SDK Product Guide.

The Secure Channel feature, optionally applicable after the activation of a compliant Digipass authenticator, allows protecting the messages exchanged between the server and the client (request messages and deactivation messages). During the activation process, the Secure Channel feature requires provisioning of a payload key represented on the server-side by a payload key BLOB.

In this case, first a payload key BLOB will have to be generated once for each Digipass serial number license.

Payload key BLOBs must be generated only if the Digipass authenticator uses the Secure Channel feature and have to be post-provisioned (DPX does not contain payload key).

No payload key BLOB must be generated if the payload key BLOB has been obtained during import (AAL2DPXGetTokenBlobsEx2) or if the Digipass authenticator does not support the Secure Channel feature.

The different Digipass instances activated from one Digipass serial number license must use the same payload key BLOB to be provisioned with the same payload key.

Parameters

Return codes