How to Change the CVM Result from "No CVM Performed" to "Online PIN"

Owned by Yan Mu
Last updated: Apr 20, 2023 by Hamdy Atakora (Unlicensed)Version comment

During Contactless EMV authentication, we need to know how to change the Cardholder Verification Method(CVM) result from "No CVM performed" to "Online PIN" for Master Card (A0000000041010, Group: 8)

Here are the group settings:

Group NumberTLV
005f2a0208405f36010297009a030101019c01009f01060000000000009f02060000000000019f03060000000000009f090200029f150200009f160f0000000000000000000000000000009f1a0208409f1b04000017709f1c0800000000000000009f21030153369f33030008e89f3501229f400560000030009f4104000000009f4e1e0000000000000000000000000000000000000000000000000000000000009f5301009f5801039f5903dc80009f5a01009f5d060000000050009f5e02e0009f5f060000000080009f660434c000009f6d0200019f7c140000000000000000000000000000000000000000df260101df2a06000000005000df2b0132df2c010adf680101df7503003000df7c0100df7d0100df7f0100df891b0101df891f02ffffdfed110101dfed3f0100dfed4a020006dfef360400000000dfef4b03120000ffe40100ffee1d0504042a0c31ffee1e0101fff003020000fff106000000010000fff2083030303030303030fff302fffffff403000601fff506000000008000fff70102fff80100fff90103fffa020000fffb0100fffd05f850acf800fffe05f850aca000ffff050000000000
085f2a0205565f57009f01009f02060000000000019f03060000000000009f090200029f150211119f16009f1a0205569f1c009f1d086cff0000000000009f33009f3501229f400500000000009f4e009f6d0200019f7e00df260101df6000df6200df6300df810800df810900df810a00df810d00df81170100df81180160df81190108df811a039f6a04df811c020000df811d0100df811e0110df811f0108df812306000000010000df812406000000030000df812506000000050000df812c0100ffe40108fff2083030303030303030fff506000000001000fffc0104fffd050000000000fffe050000000000ffff050000000000


The TLVs obtained during the Master Card transaction are as follows.

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


The device's TTQ (9F66) changed to a CVM enabled setting with 34C00000, but the actual card transaction result shows that the 9f34 Tag is responding with 1F0302 as No CVM required.


A: Your transaction data shows you have a transaction amount of $0.00. The transaction amount needs to be greater than the CVM limit to go through the cardholder verification process. Because you want to modify for the Mastercard brand, you do not need to change TTQ, which is used for VISA cards.

Instead, you will need to look for Tag DF8118 CVM capability when the transaction amount is greater than the reader's CVM required limit. The Tag definition is as follows:


In your Group 8 settings, DF8118 = 0x60. In other words, your reader does support online PIN and signature. If you start a transaction with the amount of $11.00 (as your CVM limit was set to $10.00) without changing your MasterCard group TLVs, you'll have a CMV result of Tag 9F34 = 420300  which is an online PIN request. Try again with a higher transaction amount, such as $11.00, and a test card: MCD50.T01.S02.

Sample log:

OUT: 5669564f746563683200024000161e9c01009f02060000000011009f0306000000000000dbb7

IN: 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