Page 1 of 1

How do I create a security domain and install applet in the security domain?

Posted: Sat Nov 07, 2015 4:37 am
by Abbott
Could anyone tell me how to create a security domain and install applet in it?

Re: How do I create a security domain and install applet in the security domain?

Posted: Mon Nov 09, 2015 5:55 am
by horse dream
For these questions, you can find all the answers in GP 2.1.1 spec.

1. Create a security domain

1) Select ISD AID: A0 00 00 00 03 00 00 00 //
Please see GP 2.1.1 charpter 9.9 for more details.
2) Init-update and External-Authenticate //
Please see GP 2.1.1 charpter E.5 for more details.
3) Send Install commands for Install and makeselectable //
Please seeGP211 charpter 9.5.

2. Install applet in the security domain

1) Select ISD or SSD (the SSD which is for install applet must have permission of Delegated Management)
2) Init-update and External-Authenticate
3) Send Install command for Install and makeselectable.

Re: How do I create a security domain and install applet in the security domain?

Posted: Wed Nov 11, 2015 2:30 am
by UNKNwYSHSA
When you install a SSD instance, the
the AID for the installable Security
Domain Executable Load File (package) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50' and
the Executable Module AID (applet) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50 41'.

This is in the specification: "Mapping Guidelines of Existing GP v2.1.1 Implementation on v2.2.1"