How Do I Set the Whitelist on VP3300 and Augusta Readers?
Typically, these commands govern the management of white-listed magstripe gift cards (and other non-financial cards). At transaction time, the reader checks the BIN range of a card (the first eight digits of the PAN) against the whitelist to determine if the card is a non-financial card. If so, the transaction proceeds in the clear. If not, normal encryption policy prevails.
VP3300
Set whitelist command 91-10, data; see the command details here:
Example 1
How to add a gift card (72xxxxxxxxxxxxxxxxx) to a whitelist (i.e., any card number that starts with 72 would not be encrypted):
Send command 91-10 with the following data:
890030260201013120301E1300300C0204044AA200020400000000300C0204044AA2000204FFFFFFFF00001C50
Breaking down the data:
89 00 30 26 02 01 01 31 2030 1E 13 0030 0C 02 04 04 4A A2 00 02 04 00 00 00 00 // 044AA200 = 72,000,00030 0C 02 04 04 4A A2 00 02 04 FF FF FF FF 00 00
Pushing a whitelisting command replaces the previous whitelist. In order to add the second range, you must include the previous whitelist in the new one.
Example 2:
How to add a gift card (72xxxxxxxxxxxxxxxxx) and (82xxxxxxxxxxxxxxxxx) to the whitelist:
Send command 91-10 with the following data:
890030460201013140301E1300300C0204044AA200020400000000300C0204044AA2000204FFFFFFFF301E1300300C020404E33880020400000000300C020404E338800204FFFFFFFF00009CFF
Break down the data:
89 00 30 46 02 01 01 31 4030 1E 13 0030 0C 02 04 04 4A A2 00 02 04 00 00 00 00 // 044AA200 = 72,000,00030 0C 02 04 04 4A A2 00 02 04 FF FF FF FF30 1E 13 0030 0C 02 04 04 E3 38 80 02 04 00 00 00 00 // 04E33880 = 82,000,00030 0C 02 04 04 E3 38 80 02 04 FF FF FF FF 00 00
As a final example, to display the pattern of adding multiple cards; adding gift card (72xxxxxxxxxxxxxxxxx), (72xxxxxxxxxxxxxxxxx), and (92xxxxxxxxxxxxxxxxx) to the whitelist.
Example 3:
Send command 91-10 with the following data:
890030660201013160301E1300300C0204044AA200020400000000300C0204044AA2000204FFFFFFFF301E1300300C020404E33880020400000000300C020404E338800204FFFFFFFF301E1300300C0204057BCF00020400000000300C0204057BCF000204FFFFFFFF00007970
Break down the data:
89 00 30 66 02 01 01 31 6030 1E 13 0030 0C 02 04 04 4A A2 00 02 04 00 00 00 00 // 044AA200 = 72,000,00030 0C 02 04 04 4A A2 00 02 04 FF FF FF FF30 1E 13 0030 0C 02 04 04 E3 38 80 02 04 00 00 00 00 // 04E33880 = 82,000,00030 0C 02 04 04 E3 38 80 02 04 FF FF FF FF30 1E 13 0030 0C 02 04 05 7B CF 00 02 04 00 00 00 00 // 057BCF00 = 92,000,00030 0C 02 04 05 7B CF 00 02 04 FF FF FF FF 00 00
Augusta
Augusta only allows the user to set up a maximum of 50 sets of ANS.1 data. In this case, Augusta readers will not be able to cover all cards that begin with 7. The best option is to specify a specific BIN range.
For example, to add the gift card 7213xxxx:
Send an NGA command with the following data:
78464D0315003013020101310E300C130002030B019402030B01F70000
Breaking down the data:
78 46 4D 03 15 00 30 13 02 01 01 31 0E30 0C13 0002 03 0B 01 94 // 0x0B0194 = 72130002 03 0B 01 F7 // 0x0B01F7 = 721,3990000 // MAC version data, where 0000 = Augusta non-SRED