Pre-personalization step on JCOP cards

Question

Hi guys!
I have problem with pre-personalization step on JCOP cards. Using JCOP documentation I set global pin, 3 DES keys and keyset, card-state as OP_READY. Card not in fuse state and not protected, all needed info I write to card using /send WRITE comand from JCOP Shell in root applet. But when I /send PROTECT card not responce, I wait about 2 hours, but nothing happend. Can anybody face with with this problem and can help me?

Answer 1

Hi,
I write script for JCOP shell, and use it for prepersonalization step, you need to change all addresses, because they are incorrect:
#----Pre-personalization script----
#Script folder can be set using /set-var shell command (e.g. /set-var path c:/JCShellScripts).
#The JCShell always searches the current directory for script files.
#To execute a script, just type the name of the file (without extension) in the JCShell command line.
#-------VARIABLES-----------
/set-var Kt                 __INSERT_YOUR_TRANSPORT_KEY__
/set-var chanel             0
/set-var OK_resp            9000
#Card manager lifecycle
/set-var CM_LIFECYCLE_size        02
/set-var CM_OP_READY          FE01
/set-var CM_INITILIZED          F807
/set-var CM_SECURED                  F00F
/set-var CM_CARD_LOCKED          807F
/set-var CM_TERMINATED          00FF
/set-var CM_LIFECYCLE          ${CM_OP_READY}
#Card manager default keys:
/set-var DES_key_size          10
/set-var DES_key_keyset          FF
/set-var DES_keyset_size     01
/set-var DES_K1           0123456789ABCDEF0123456789ABCDEF
/set-var DES_K2           0123456789ABCDEF0123456789ABCDEF
/set-var DES_K3           0123456789ABCDEF0123456789ABCDEF
#size of GPIN_size is 01, size of GPIN_format is 01 and sizes used in functions without pre-defined constants
/set-var GPIN                 3132333435
/set-var GPIN_size             05
/set-var GPIN_format           01
#-------COMANDS-------------
/set-var BOOT                  __INSERT_YOUR_COMMAND__(like 00100000)
/set-var PROTECT              __INSERT_YOUR_COMMAND__
/set-var FUSE                  __INSERT_YOUR_COMMAND__
/set-var AUTH                  __INSERT_YOUR_COMMAND__
/set-var ADMINEXEC             __INSERT_YOUR_COMMAND__
/set-var READ                  __INSERT_YOUR_COMMAND__
/set-var WRITE                 __INSERT_YOUR_COMMAND__
#-------ADRESSES------------
#     From: 188730_JCOPV2_4_1R3_admi.pdf
/set-var A2_addr                __INSERT_YOUR_ADRESS__ (1 byte)
/set-var CM_Lifecycle_addr     __INSERT_YOUR_ADRESS__(2 bytes)
/set-var DES_K1_addr           __INSERT_YOUR_ADRESS__
/set-var DES_K2_addr           __INSERT_YOUR_ADRESS__
/set-var DES_K3_addr            __INSERT_YOUR_ADRESS__
/set-var DES_K1_type_addr      __INSERT_YOUR_ADRESS__
/set-var DES_K2_type_addr      __INSERT_YOUR_ADRESS__
/set-var DES_K3_type_addr      __INSERT_YOUR_ADRESS__
/set-var GPIN_addr           __INSERT_YOUR_ADRESS__
/set-var GPIN_size_addr      __INSERT_YOUR_ADRESS__
/set-var GPIN_format_addr      __INSERT_YOUR_ADRESS__
#==============================
#connect to card
#===============
/terminal
/atr
#select root applet with Transport key (Kt), and chanel 0
/select ${Kt} ${chanel}
#boot applet
#===========
/echo BOOT ROOT APPLET:
/send ${BOOT}
#setup CM lifecycle
/echo setup CM lifecycle
/send "${A2_addr}${WRITE}${CM_Lifecycle_addr} ${CM_LIFECYCLE_size} ${CM_LIFECYCLE}"
#check it
/send "${A2_addr}${READ}${CM_Lifecycle_addr}${CM_LIFECYCLE_size}"
/set-var chk ${CM_LIFECYCLE}${OK_resp}
if ${response} != ${chk}
   throw "ERROR: CM_LIFECYCLE not set"
end
#setup DES keys SET UP DES KEYS: 10.4.2
#======================================
/echo SETUP DES KEY:
/send "${A2_addr}${WRITE}${DES_K1_addr} ${DES_key_size} ${DES_K1}"
/send "${A2_addr}${WRITE}${DES_K2_addr} ${DES_key_size} ${DES_K2}"
/send "${A2_addr}${WRITE}${DES_K3_addr} ${DES_key_size} ${DES_K3}"
#check it:
/echo CHECK DES KEYS:
/send  ${A2_addr}${READ}${DES_K1_addr}${DES_key_size}
/set-var chk ${DES_K1}${OK_resp}
if ${response} != ${chk}
   throw "ERROR: DES_K1 not equal"
end
/send  ${A2_addr}${READ}${DES_K2_addr}${DES_key_size}
/set-var chk ${DES_K2}${OK_resp}
if ${response} != ${chk}
   throw "ERROR: DES_K2 not equal"
end
/send  ${A2_addr}${READ}${DES_K3_addr}${DES_key_size}
/set-var chk ${DES_K3}${OK_resp}
if ${response} != ${chk}
   throw "ERROR: DES_K3 not equal"
end
#set key type
#============
/echo SET KEY TYPE = ${DES_key_keyset}:
/send "${A2_addr}${WRITE}${DES_K1_type_addr}${DES_keyset_size}${DES_key_keyset}"
/send "${A2_addr}${WRITE}${DES_K2_type_addr}${DES_keyset_size}${DES_key_keyset}"
/send "${A2_addr}${WRITE}${DES_K3_type_addr}${DES_keyset_size}${DES_key_keyset}"
#check it:
#=========
/echo CHECK KEY TYPE:
/send  ${A2_addr}${READ}${DES_K1_type_addr}${DES_keyset_size}
/set-var chk ${DES_key_keyset}${OK_resp}
if ${response} != ${chk}
   throw "ERROR: DES_K1_keyset not equal"
end
/send ${A2_addr}${READ}${DES_K2_type_addr}${DES_keyset_size}
if ${response} != ${chk}
   throw "ERROR: DES_K2_keyset not equal"
end
/send ${A2_addr}${READ}${DES_K3_type_addr}${DES_keyset_size}
if ${response} != ${chk}
   throw "ERROR: DES_K3_keyset not equal"
end
#set pin 12345 -(hex)->31 32 33 34 35
#====================================
/echo SETUP GLOBAL PIN (12345:5:ASCII):
/send "${A2_addr}${WRITE}${GPIN_addr} ${GPIN_size} ${GPIN}"
#set pin size 5 byte
/send "${A2_addr}${WRITE}${GPIN_size_addr} 01 ${GPIN_size}"
#set pin format ASCII
/send "${A2_addr}${WRITE}${GPIN_format_addr} 01 ${GPIN_format}"
#check set pin:
/send "${A2_addr}${READ}${GPIN_addr} ${GPIN_size}"
/set-var chk ${GPIN}${OK_resp}
if ${response} != ${chk}
   throw "ERROR: GPIN not equal"
end
#pin size:
/send "${A2_addr}${READ}${GPIN_size_addr} 01"
/set-var chk ${GPIN_size}${OK_resp}
if ${response} != ${chk}
   throw "ERROR: GPIN_size not equal"
end
#pin format:
/send "${A2_addr}${READ}${GPIN_format_addr} 01"
/set-var chk ${GPIN_format}${OK_resp}
if ${response} != ${chk}
   throw "ERROR: GPIN_format not equal"
end
#need to send protect
/echo PROTECT
/send ${PROTECT}
if ${response} != '9000'
     throw "ERROR IN PROTECT:" ${last.error} "Card can`t be fuse..."
end
#fuse:
/echo FUSE STEP:
/send ${FUSE}
if ${response} != '9000'
throw "ERROR in FUSE" ${last.error}
#end
/close