Hi!
To decrypt ZPK you should do the following steps:
1) generate ZMK component with GC console command;
2) form ZMK component into the key in U scheme using FK console command;
3) export your ZPK under ZMK in X scheme using KE console command;
4) decrypt ZPK under ZMK with ZMK component generated in 1st step using DES calculator.
I assume, you are using different keys under LMK and on your application side. When HSM decrypts PIN-block it validates PIN-block quality. If the PIN-block was encrypted with different key the decryption result will be compleately wrong.
Regards,
Juris
To decrypt ZPK you should do the following steps:
1) generate ZMK component with GC console command;
2) form ZMK component into the key in U scheme using FK console command;
3) export your ZPK under ZMK in X scheme using KE console command;
4) decrypt ZPK under ZMK with ZMK component generated in 1st step using DES calculator.
I assume, you are using different keys under LMK and on your application side. When HSM decrypts PIN-block it validates PIN-block quality. If the PIN-block was encrypted with different key the decryption result will be compleately wrong.
Regards,
Juris