Hi Christ,
thank you for the response. please find the settings of the HSM below and let me know if any changes need to be made.
Online-AUTH>VR
Base release: 3.1a
Revision: 1110-0831
Build Number: 0008
Bootstrap Version: 2.5.7
Kernel Version: 3.8.3
ESS FPGA Version: 2.44.3
HSM Core API Version: 3.4.14
HSM Application Version: 3.4.14
HSM COMMs Version: 1.9.2
Application Checksum: FB90
Host Configuration: Async, Ethernet, SNA-SDLC 3274
Serial Number: A3453266271V Licence Issue No: 2
Performance: 220 TPS Build location: 01
Base Software: Version 3 Ship Counter: 1
Crypto: 3DES, RSA
Press "Enter" to view additional information...
HSM8-LIC001 V3 Base
HSM8-LIC002 RSA
Online-AUTH>QS
PIN length: 04
Encrypted PIN length: 05
Echo: OFF
Atalla ZMK variant support: ON
Transaction key support: RACAL
User storage key length: TRIPLE
Select clear PINs: YES
Enable ZMK translate command: YES
Enable X9.17 for import: YES
Enable X9.17 for export: YES
Solicitation batch size: 1024
Single-DES: ENABLED
Prevent Single-DES keys masquerading as double or triple-length keys: NO
ZMK length: DOUBLE
Decimalization tables: PLAINTEXT
Decimalization table checks: ENABLED
PIN encryption algorithm: A
Card/password authorisation (local): C
Press "Enter" to view additional security settings...
Authorised State required when Importing DES key under RSA key: NO
Minimum HMAC key length in bytes: 64
Enable PKCS#11 import and export for HMAC keys: YES
Enable ANSI X9.17 import and export for HMAC keys: YES
Enable ZEK encryption of all printable ASCII chars: YES
Enable ZEK encryption of "Base94" ASCII chars: YES
Enable ZEK encryption of "Base64" ASCII chars: YES
Enable ZEK encryption of "Hex-only" ASCII chars: YES
Restrict Key Check Values to 6 hex chars: NO
Enable multiple authorised activities: NO
Enable variable length PIN offset: YES
Enable weak PIN checking: NO
Enable Pin Block Format 34 as output format for PIN Translations to ZPK: YES
Default LMK identifier: 00
Management LMK identifier: 00
Use HSM clock for date/time validation: NO
Additional padding to disguise key length: NO
Key export and import in trusted format only: NO
Online-AUTH>V
Enter LMK id [0-4]: 0