Page 1 of 1

problems installing the applet on the card

Posted: Thu Jun 30, 2016 1:27 pm
by bushKape
when installing the applet on the card with the privilege "security domain" an error

Code: Select all

Install Applet error: Install Applet failed. Send: 80 E6 0C 00 1D 06 D1 D2 D3 D4 D5 01 07 D1 D2 D3 D4 D5 01 01 07 D1 D2 D3 D4 D5 01 01 01 9E 02 C9 00 00 00, Recv: 69 85.

how to fix it and with what it is connected?
Thanks in advance for any help
I have a card nxp j2a

Re: problems installing the applet on the card

Posted: Fri Jul 01, 2016 2:32 am
by mabel
This issue may be due to the wrong package AID and applet AID.

Here are two segments quoted from Mapping Guidelines of Existing GP v2.1.1 Implementation on v2.2.1, which can help you out.

Part - 6.6.2.3 INSTALL [for install and make selectable] -> Application Privileges
For an implementation supporting Supplementary Security Domains, this privilege indicates that
the Application being installed is a Security Domain and Applications associated to this
Supplementary Security Domain may use its Secure Channel services. If the above Executable
Load File AID does not match the AID for the installable Security Domains code defined in
section 3, a response of '6985' is returned.


Part - 3.1 OPEN
For implementations supporting Supplementary Security Domains, the AID for the installable Security
Domain Executable Load File (package) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50' and
the Executable Module AID (applet) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50 41'. The
Issuer Security Domain is this Executable Load File’s associated Security Domain.

Re: problems installing the applet on the card

Posted: Fri Jul 01, 2016 3:54 am
by UNKNwYSHSA
It seems that we cann't create our own applet and install as security domain.

Re: problems installing the applet on the card

Posted: Fri Jul 01, 2016 10:35 am
by bushKape
mabel wrote:This issue may be due to the wrong package AID and applet AID.

Here are two segments quoted from Mapping Guidelines of Existing GP v2.1.1 Implementation on v2.2.1, which can help you out.

Part - 6.6.2.3 INSTALL [for install and make selectable] -> Application Privileges
For an implementation supporting Supplementary Security Domains, this privilege indicates that
the Application being installed is a Security Domain and Applications associated to this
Supplementary Security Domain may use its Secure Channel services. If the above Executable
Load File AID does not match the AID for the installable Security Domains code defined in
section 3, a response of '6985' is returned.


Part - 3.1 OPEN
For implementations supporting Supplementary Security Domains, the AID for the installable Security
Domain Executable Load File (package) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50' and
the Executable Module AID (applet) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50 41'. The
Issuer Security Domain is this Executable Load File’s associated Security Domain.

when you change AID the error still repeats
Thanks for helping

Re: problems installing the applet on the card

Posted: Fri Jul 01, 2016 10:40 pm
by UNKNwYSHSA
Ask your card provider what is the Supplementary Security Domain's package AID and applet AID, and you can create one Supplementary Security Domain by its installation.
Your own applet can not be installed as Security Domain.
So far as i know.

For example, the card JCOP V2.4.2R2:
AID of Executable Load File is:
A0000001515350h
• AID of Module is:
A000000151535041h
The Module can be used to instantiate an SSD.

Note: From JCOP V2.4.2R2 User Manual.