How to establish Secure Channel

[filip1101]

So i am trying to download cap file on Pyresman and it gives me error: Establish secure channel
I know that i need to initate Secure Channel( when the on-card Application and the off-card entity have exchanged
sufficient information enabling them to perform the required cryptographic functions)
But how can I do that?
Is there any APDU Commands \
Something that you need to do so the reader can exchange information with the MIFARE Card
Also when I send the command: 00 A0 04 00 00 , I dont get a response, does anyone know why?
Or that doesn't matter at all?
I asked previosly about the error: GP Card Manager failed Send:00 A0 04 00 00 Recv: 00 00
and someone said that i need to lok at Global Platform special about the Secure Channel Protocol?
So do you know what I should do?

[DaHuFa]

The Secure Channel provides a secure communication channel between a card and an off-card entity during an Application Session.
Do you know the Secure Channel key set of the application or the security domain keys ? Only you know the key, you can establish the secure channel.

The 10 chapter of Global Platform special Version 2.2.1 descripts "Secure Channel".