AAL2ProcGenMessageActivation2Rpl

A string of up to 2195 bytes that contain the GENERATE MESSAGE ACTIVATION2 command type and the output data from the Generate Message Activation2 function on the HSM:

• Command type - 2 bytes
• Digipass Master Activation application BLOB - 192 bytes
• Sequence Number - 4 bytes
• Digipass TYPE - 6 characters
• Application Count - 2 bytes
• Serial Application - 23 characters (x1 to 8)
• Authentication Mode - 3 characters (x1 to 8)
• An authenticator application BLOB - 192 bytes (x1 to 8)
• Activation Message 2 - 109 characters
• Activation Message 2 Length - 4 bytes
• Return code - 4 bytes

Plus 128 bytes for Authentication Suite Server SDK internal use.

The length of the InReply message.

Digipass master activation application BLOB of the Digipass serial number license that will be used for the activation. Upon return from the function call, this BLOB must be rewritten to the application database to reflect changes.

Contains in output the sequence number of the generated Digipass instance (from 1 to 99).

An output string of 5+1 characters, null-terminated. It contains the Digipass type name given to the Digipass instance. Will return a Digipass type of the form TYPxx with xx representing the device type coded on two decimal digits e.g. TYP07.

Number of Digipass applications returned. Points to a short integer where the function returns the number of applications found.

Set of up to 8 x 22+1 character strings, null-terminated, each composed of the 10-character license serial number concatenated with the 12-character application name. Each array entry represents the logical instance of a Digipass cryptographic application with its unique secrets and parameters. The application name part will end with the sequence number coded on two decimal digits e.g. APPL1    03.

Set of up to 8 x 2+1 character strings, null-terminated. Defines each returned authenticator application authentication mode.

RO: Response-Only

CR: Challenge/Response

SG: Signature

MM: Multi-Mode

UL: Unlock V2

Signature-mode devices may also be used for Challenge/Response authentication if they are programmed to accept a single input data field.

Up to 8 authenticator application BLOBs of the Digipass instance. Upon return from the function call, these BLOBs must be written to the application database.

String of up to 124+1 hexadecimal characters, null-terminated. It contains the Activation Message 2 which is necessary during the activation process to provision the Digipass keys and the payload key to the Digipass device.

In input, this parameter must indicate the size of the allocated buffer for the Activation2Message parameter (recommended 125 bytes). In output, this parameter indicates the length of the Activation2Message string (without the null-terminated character).