problems installing the applet on the card

[bushKape]

when installing the applet on the card with the privilege "security domain" an error

Code: Select all

Install Applet error: Install Applet failed. Send: 80 E6 0C 00 1D 06 D1 D2 D3 D4 D5 01 07 D1 D2 D3 D4 D5 01 01 07 D1 D2 D3 D4 D5 01 01 01 9E 02 C9 00 00 00, Recv: 69 85.

how to fix it and with what it is connected?
Thanks in advance for any help
I have a card nxp j2a

[mabel]

This issue may be due to the wrong package AID and applet AID.

Here are two segments quoted from Mapping Guidelines of Existing GP v2.1.1 Implementation on v2.2.1, which can help you out.

Part - 6.6.2.3 INSTALL [for install and make selectable] -> Application Privileges

For an implementation supporting Supplementary Security Domains, this privilege indicates that
the Application being installed is a Security Domain and Applications associated to this
Supplementary Security Domain may use its Secure Channel services. If the above Executable
Load File AID does not match the AID for the installable Security Domains code defined in
section 3, a response of '6985' is returned.

Part - 3.1 OPEN

For implementations supporting Supplementary Security Domains, the AID for the installable Security
Domain Executable Load File (package) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50' and
the Executable Module AID (applet) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50 41'. The
Issuer Security Domain is this Executable Load File’s associated Security Domain.

[UNKNwYSHSA]

It seems that we cann't create our own applet and install as security domain.

[bushKape]

This issue may be due to the wrong package AID and applet AID.

Here are two segments quoted from Mapping Guidelines of Existing GP v2.1.1 Implementation on v2.2.1, which can help you out.

Part - 6.6.2.3 INSTALL [for install and make selectable] -> Application Privileges

For an implementation supporting Supplementary Security Domains, this privilege indicates that
the Application being installed is a Security Domain and Applications associated to this
Supplementary Security Domain may use its Secure Channel services. If the above Executable
Load File AID does not match the AID for the installable Security Domains code defined in
section 3, a response of '6985' is returned.

Part - 3.1 OPEN

For implementations supporting Supplementary Security Domains, the AID for the installable Security
Domain Executable Load File (package) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50' and
the Executable Module AID (applet) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50 41'. The
Issuer Security Domain is this Executable Load File’s associated Security Domain.

when you change AID the error still repeats
Thanks for helping

[UNKNwYSHSA]

Ask your card provider what is the Supplementary Security Domain's package AID and applet AID, and you can create one Supplementary Security Domain by its installation.
Your own applet can not be installed as Security Domain.
So far as i know.

For example, the card JCOP V2.4.2R2:

AID of Executable Load File is:
A0000001515350h
• AID of Module is:
A000000151535041h
The Module can be used to instantiate an SSD.

Note: From JCOP V2.4.2R2 User Manual.