How Do I Set the Whitelist on VP3300 and Augusta Readers?

Owned by Tzuling Lin
Last updated: Nov 22, 2022 by Chris Barton

Typically, these commands govern the management of white-listed magstripe gift cards (and other non-financial cards). At transaction time, the reader checks the BIN range of a card (the first eight digits of the PAN) against the whitelist to determine if the card is a non-financial card. If so, the transaction proceeds in the clear. If not, normal encryption policy prevails.

VP3300

Set whitelist command 91-10, data; see the command details here:

Example 1

How to add a gift card (72xxxxxxxxxxxxxxxxx) to a whitelist (i.e., any card number that starts with 72 would not be encrypted):

Send command 91-10 with the following data:

890030260201013120301E1300300C0204044AA200020400000000300C0204044AA2000204FFFFFFFF00001C50

Breaking down the data:

89 00 30 26 02 01 01 31 20
30 1E 13 00
30 0C 02 04 04 4A A2 00 02 04 00 00 00 00          // 044AA200 = 72,000,000
30 0C 02 04 04 4A A2 00 02 04 FF FF FF FF 00 00


Pushing a whitelisting command replaces the previous whitelist. In order to add the second range, you must include the previous whitelist in the new one.

Example 2: 

How to add a gift card (72xxxxxxxxxxxxxxxxx) and (82xxxxxxxxxxxxxxxxx) to the whitelist:

Send command 91-10 with the following data:

890030460201013140301E1300300C0204044AA200020400000000300C0204044AA2000204FFFFFFFF301E1300300C020404E33880020400000000300C020404E338800204FFFFFFFF00009CFF


Break down the data:

89 00 30 46 02 01 01 31 40
30 1E 13 00
30 0C 02 04 04 4A A2 00 02 04 00 00 00 00          // 044AA200 = 72,000,000
30 0C 02 04 04 4A A2 00 02 04 FF FF FF FF
30 1E 13 00
30 0C 02 04 04 E3 38 80 02 04 00 00 00 00          // 04E33880 = 82,000,000
30 0C 02 04 04 E3 38 80 02 04 FF FF FF FF 00 00


As a final example, to display the pattern of adding multiple cards; adding gift card (72xxxxxxxxxxxxxxxxx), (72xxxxxxxxxxxxxxxxx), and (92xxxxxxxxxxxxxxxxx) to the whitelist.

Example 3: 

Send command 91-10 with the following data:

890030660201013160301E1300300C0204044AA200020400000000300C0204044AA2000204FFFFFFFF301E1300300C020404E33880020400000000300C020404E338800204FFFFFFFF301E1300300C0204057BCF00020400000000300C0204057BCF000204FFFFFFFF00007970

Break down the data:

89 00 30 66 02 01 01 31 60
30 1E 13 00
30 0C 02 04 04 4A A2 00 02 04 00 00 00 00          // 044AA200 = 72,000,000
30 0C 02 04 04 4A A2 00 02 04 FF FF FF FF
30 1E 13 00
30 0C 02 04 04 E3 38 80 02 04 00 00 00 00          // 04E33880 = 82,000,000
30 0C 02 04 04 E3 38 80 02 04 FF FF FF FF
30 1E 13 00
30 0C 02 04 05 7B CF 00 02 04 00 00 00 00          // 057BCF00 = 92,000,000
30 0C 02 04 05 7B CF 00 02 04 FF FF FF FF 00 00

Augusta

Augusta only allows the user to set up a maximum of 50 sets of ANS.1 data. In this case, Augusta readers will not be able to cover all cards that begin with 7. The best option is to specify a specific BIN range.

For example, to add the gift card 7213xxxx:

Send an NGA command with the following data:

78464D0315003013020101310E300C130002030B019402030B01F70000

Breaking down the data:

78 46 4D 03 15 00 30 13 02 01 01 31 0E
30 0C
13 00
02 03 0B 01 94  // 0x0B0194 = 721300
02 03 0B 01 F7  // 0x0B01F7 = 721,399
0000  // MAC version data,  where 0000 = Augusta non-SRED