How do I enable encryption for a NEO device?

Owned by Miles Bonner (Deactivated)
Last updated: Feb 01, 2024 by Yan Mu
2 min read

Answer:

Scope: This article applies to all NEO products (UniPay III, Kiosk III, Kiosk IV, Kiosk V, Vendi, Vendi Pro, VP5300, VP3300, VP8300, etc.)



You can check the encryption status with the C7-36 command.
This command can be executed in our dotNET SDK Demo on a Windows computer

  1. In the demo go into "Device" and click "Send NEO Command".

  2. the CMD field is C7, the Sub-command is 36.

  3. In the data field, specify which encryption state you want (See list below)

  4. After filling in the fields, click "Execute Command"

  5. The results window should give you a 1-byte response indicating your encryption status

image-20240202-001612.png

There are 3 possible encryption states:

  1. 00. No encryption

  2. 01. EMV encryption only

  3. 02. MSR encryption only

  4. 03. MSR and EMV encryption

NOTE: You can NOT use this command to disable encryption. Once you enable encryption (States 01, 02. and 03) there is no way to set the reader back into state 00. 

NOTE: It IS possible to have a device with NO key injected and an encryption status greater than 00. Encryption status is NOT key status. A reader without a data encryption key will not output encrypted data and an SRED reader without a data encryption key injected will not output any data (clear text, or encrypted).