Different FIPS-PIV credential readers produce different Wiegand
outputs. Consider the following credential readers that output the
complete FASCN and the HMAC signature:
z
HID iClass Readers
z
ExceedID Readers
HID iClass Readers
The HID iClass FIPS-PIV credential readers support an output that
places the 32-bit HMAC in front of the FASC-N. In this case, the
PIVReaderFormat string variable should be as follows:
32BitHMAC – FULL_FASCN
Note: The” –” sign is used to separate these fields and not the “+” sign
because there is no field separator transmitted by the reader
between the two fields and the “–'” is used as an artificial field
separator.
For more information about FIPS-PIV reader outputs, refer to the
FIPS201 Reader Output Selections Application Note, published by the
HID Corporation and available at their website. This documentation is
also included with Andover Continuum software, version 1.82.
ExceedID Readers
The ExceedID Corporation supports an output that embeds the HMAC
into the FASCN by replacing the PI element of the FASCN. (See the
table at the beginning of this section, page 155.)
Note: This HMAC is formatted as ten 5-bit BCD digits representing
each digit in the HMAC, not the 32-bit number used in the HID
iClass readers. Therefore, the keyword “HMAC” refers to the
format that uses 10 BCD digits to transmit the HMAC and the
keyword “32BitHMAC” refers to the format that uses a 32-bit
binary number to transmit the HMAC.
