Skip to content

Secure Element Access Control

Martin Paljak edited this page Mar 17, 2018 · 2 revisions

SE Access Control commands used to list, add & delete access rules according to Global Platform Secure Element Access Control v1.0 https://github.com/bertrandmartel/aram-applet

  • list access control rules

     gp -acr-list
    

The following command -acr-add & -acr-delete require authentication (install for personalization) :

  • add an access control rule to authorize (-acr-rule 01) apdu access for application signed with certificate hash 53AC1FC8DB794570D0CF2565DBFBE98C266AE07F for applet with AID D2760001240102000000000000000000

     gp -acr-add -acr-rule 01 -app D2760001240102000000000000000000 -acr-hash 53AC1FC8DB794570D0CF2565DBFBE98C266AE07F
    
  • add an access control rule to deny (-acr-rule 00) apdu access for application signed with certificate hash 53AC1FC8DB794570D0CF2565DBFBE98C266AE07F for applet with AID D2760001240102000000000000000000

     gp -acr-add -acr-rule 00 -app D2760001240102000000000000000000 -acr-hash 53AC1FC8DB794570D0CF2565DBFBE98C266AE07F
    
  • delete all access control rule for applet with AID D2760001240102000000000000000000

     gp -acr-delete -app D2760001240102000000000000000000