...

...

What's up with ODA (offline data authentication) in the US Market?

Can I turn off ODA (SDA,DDA, or CDA) support for an Augusta?

Introduction:

CAPKs are used by the terminal to "talk" to the card. More specifically they are used to perform ODA (offline data authentication). So, the question has been posed... "Do I need to load CAPKs for a device deployed in the US (online only market)?" The answer depends on the terminal settings. If the terminal settings define the ODA (SDA, DDA or CDA) as supported (as is the case for ID TECH's Augusta and AugustaS products), then yes, you WILL need to load CAPKs.

Some Facts:

• Augusta supports ODA always. It cannot be turned off with the currently available Terminal Settings (link: Which Terminal Settings Am I Allowed to Change?)

• Tag 95 has four bits relative to the subject (link:  What does TVR mean?)

• Byte 1: 
  

  0------- Offline data authentication was not performed
  -0------ SDA failed
  --0-----  ICC data missing
  ---0----  Card appears on terminal exception file
  ----0--- DDA failed
  -----0-- CDA failed
  ------0-  SDA selected
  -------0  RFU

• If either the card does not support ODA  or the terminal does do not support ODA, then Byte 1 bit 7 of tag 95 will be set "(Offline data authentication was not performed"). 
  • Note: Augusta supports ODA and most cards support ODA.  But, some do not 
• If the terminal and the card both support ODA then ODA will be attempted. If no CAPKs exist the it will fail. The results result will be that either bit 6, bit 3 or bit 2 will be set.
  
  

Terminal Verification Results (Tag 95), byte 1, has results for Offline Data Authentication:

Bit 8:  Offline data authentication not performed
This is triggered to "1" if:
The Application Interchange Profile (tag 82), Byte 1, supported authentication methods does NOT HAVE A MATCHING SUPPORTED authentication method in Terminal Capabilities (Tag 9F33), byte 3.

...