IDTECH SecureMag User manual

ID TECH
10721 Walker Street, Cypress, CA 90630-4720
Tel: [phone] Fax [phone]
www.idtechproducts.com [e-mail]
SecureMag
Encrypted MagStrip Reader
User Manual
USB, RS232 and PS2 Interface
80096504-001
4 October 2019

SecureMag Encrypted MagStrip Reader User Manual
Page | 2
FCC WARNING STATEMENT
This equipment has been tested and found to comply with the limits for a Class B digital device,
pursuant to Part 15 of FCC Rules. These limits are designed to provide reasonable protection against
harmful interference when the equipment is operated in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance
with the instruction manual, may cause harmful interference to radio communications. Operation of
this equipment in a residential area is likely to cause harmful interference in which case the user will
be required to correct the interference at his expense.
FCC COMPLIANCE STATEMENT
This device complies with Part 15 of the FCC Rules. Operation of this device is subject to the
following conditions: this device may not cause harmful interference and this device must accept any
interference received, including interference that may cause undesired operation.
CANADIAN DOC STATEMENT
This digital apparatus does not exceed the Class B limits for radio noise for digital apparatus set out in
the Radio Interference Regulations of the Canadian Department of Communications.
Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables
aux appareils numériques de las classe A prescrites dans le Réglement sur le brouillage
radioélectrique édicté par les ministère des Communications du Canada.
CE STANDARDS
An independent laboratory performed testing for compliance to CE requirements. The unit under test
was found compliant to Class B

SecureMag Encrypted MagStrip Reader User Manual
Page | 3
FCC warning statement
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two
conditions: (1) this device may not cause harmful interference, and (2) this device must accept any
interference received, including interference that may cause undesired operation.
The user manual for an intentional or unintentional radiator shall caution the user that changes or
modifications not expressly approved by the party responsible for compliance could void the user’s
authority to operate the equipment.
Note: The grantee is not responsible for any changes or modifications not expressly approved by the
party responsible for compliance. Such modifications could void the user’s authority to operate the
equipment.
Note: This equipment has been tested and found to comply with the limits for a Class B digital device,
pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a residential installation. This equipment generates uses and can
radiate radio frequency energy and, if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does cause harmful
interference to radio or television reception, which can be determined by turning the equipment off
and on, the user is encouraged to try to correct the interference by one or more of the following
measures:
•Reorient or relocate the receiving antenna.
•Increase the separation between the equipment and the receiver.
•Connect the equipment into an outlet on a circuit different from that to which the receiver is
connected.
•Consult the dealer or an experienced radio/TV technician for help.
This device complies with FCC RF radiation exposure limits set forth for an uncontrolled environment.
The antenna(s) used for this transmitter must not be co-located or operating in conjunction with any
other antenna or transmitter and must be installed to provide a separation distance of at least 20cm
from all persons.
Cautions and Warnings
Caution: The ViVOpay Vendi should be mounted 1-2 feet away from other
ViVOpay Vendi. Can be adjusted based on lane setup.
Caution: Danger of Explosion if battery is incorrectly replaced. Replace only with
same or equivalent type recommended by the manufacturer. Discard used
batteries according to the manufacturer’s instructions.
Warning: Avoid close proximity to radio transmitters which may reduce the ability
of the reader.

SecureMag Encrypted MagStrip Reader User Manual
Page | 4
LIMITED WARRANTY
ID TECH warrants to the original purchaser for a period of 12 months from the date of invoice that
this product is in good working order and free from defects in material and workmanship under
normal use and service. ID TECH’s obligation under this warranty is limited to, at its option, replacing,
repairing, or giving credit for any product that returned to the factory of origin with the warranty
period and with transportation charges and insurance prepaid, and which is, after examination,
disclosed to ID TECH’s satisfaction to be defective. The expense of removal and reinstallation of any
item or items of equipment is not included in this warranty. No person, firm, or corporation is
authorized to assume for ID TECH any other liabilities in connection with the sales of any product. In
no event shall ID TECH be liable for any special, incidental or consequential damages to purchaser or
any third party caused by any defective item of equipment, whether that defect is warranted against
or not. Purchaser’s sole and exclusive remedy for defective equipment, which does not conform to
the requirements of sales, is to have such equipment replaced or repaired by ID TECH. For limited
warranty service during the warranty period, please contact ID TECH to obtain a Return Material
Authorization (RMA) number & instructions for returning the product.
THIS WARRANTY IS IN LIEU OF ALL OTHER WARRANTIES OF MERCHANTABILITY OR FITNESS FOR
PARTICULAR PURPOSE. THERE ARE NO OTHER WARRANTIES OR GUARANTEES, EXPRESS OR
IMPLIED, OTHER THAN THOSE HEREIN STATED. THIS PRODUCT IS SOLD AS IS. IN NO EVENT SHALL
ID TECH BE LIABLE FOR CLAIMS BASED UPON BREACH OF EXPRESS OR IMPLIED WARRANTY OF
NEGLIGENCE OF ANY OTHER DAMAGES WHETHER DIRECT, IMMEDIATE, FORESEEABLE,
CONSEQUENTIAL OR SPECIAL OR FOR ANY EXPENSE INCURRED BY REASON OF THE USE OR
MISUSE, SALE OR FABRICATIONS OF PRODUCTS WHICH DO NOT CONFORM TO THE TERMS AND
CONDITIONS OF THE CONTRACT.
The information contained herein is provided to the user as a convenience. While every effort has
been made to ensure accuracy, ID TECH is not responsible for damages that might occur because of
errors or omissions, including any loss of profit or other commercial damage, nor for any
infringements or patents or other rights of third parties that may result from its use. The
specifications described herein were current at the time of publication but are subject to change at
any time without prior notice.
ID TECH and Value through Innovation are trademarks of International Technologies & Systems
Corporation. USB (Universal Serial Bus) specification is copyright by Compaq Computer Corporation,
Intel Corporation, Microsoft Corporation, and NEC Corporation. Windows is registered trademarks of
Microsoft Corporation.
ID TECH
10721 Walker Street
Cypress, CA 90630
[phone]

SecureMag Encrypted MagStrip Reader User Manual
Page | 5
Table of Contents
1. INTRODUCTION..................................................................................................................................................................................7
1.1. Document Notations ...............................................................................................................................................................7
2. FEATURES AND BENEFITS.............................................................................................................................................................7
3. APPLICABLE DOCUMENTS.............................................................................................................................................................7
4. SPECIFICATIONS................................................................................................................................................................................8
4.1. Interface Cable and Connector..............................................................................................................................................8
4.1.1. Keyboard Wedge ..............................................................................................................................................................................................................9
4.1.2. PS/2 Connector.................................................................................................................................................................................................................9
5. OPERATIONS ...................................................................................................................................................................................10
6. COMMAND PROCESS....................................................................................................................................................................10
6.1. Function ID Table ...................................................................................................................................................................10
6.2. Setting Command..................................................................................................................................................................10
6.3. Get Setting...............................................................................................................................................................................11
6.4. Get Copyright Information ..................................................................................................................................................12
6.5. Version Report Command...................................................................................................................................................12
6.6. Reader Reset Command......................................................................................................................................................12
6.7. OPOS/JPOS Command.........................................................................................................................................................12
6.8. Arm or Disarm to Read Command....................................................................................................................................12
6.8.1. Arm to Read......................................................................................................................................................................................................................12
6.8.2. Disarm to Read...............................................................................................................................................................................................................13
6.9. Read Buffered MSR Data Command ...............................................................................................................................13
6.10. Read MSR Options Command.........................................................................................................................................14
6.11. Set MSR Options Command ............................................................................................................................................14
6.11.1. Beep Volume.................................................................................................................................................................................................................14
7. MSR READING SETTINGS: ...........................................................................................................................................................16
7.1. Decoding Method Settings .................................................................................................................................................16
7.2. Terminator Setting ................................................................................................................................................................16
7.3. Preamble Setting ...................................................................................................................................................................16
7.4. Postamble Setting.................................................................................................................................................................17
7.5. Track n Prefix Setting ...........................................................................................................................................................17
7.6. Track x Suffix Setting ............................................................................................................................................................17
7.7. Track Selection .......................................................................................................................................................................18
7.8. Track Separator Selection ...................................................................................................................................................18
7.9. Start and End Sentinel (Track 2 Account Number Only) ............................................................................................18
8. SECURITY FEATURES....................................................................................................................................................................19
8.1. Encryption Management.....................................................................................................................................................19
8.2. Check Card Format................................................................................................................................................................20
8.3. MSR Data Market ..................................................................................................................................................................20
9. DEMO PROGRAM...........................................................................................................................................................................21
9.1. Overview of SecureMag Demo ..........................................................................................................................................21
9.1.1. Manual Command........................................................................................................................................................................................................21
9.2. Decryption................................................................................................................................................................................22
9.3. Reader Operations.................................................................................................................................................................24
10. DATA FORMAT..............................................................................................................................................................................25
10.1. Level One and Level Two Standard Mode Output Format .....................................................................................25

SecureMag Encrypted MagStrip Reader User Manual
Page | 6
10.1.1. USB HID Data Format.............................................................................................................................................................................................25
10.1.2. Descriptor Tables.......................................................................................................................................................................................................27
10.2. Level One and Level Two POS Mode Data Output Format.....................................................................................30
10.3. DUKPT Level Four Data Output Original Format .......................................................................................................32
10.4. Level 4 Data Output Original Format ............................................................................................................................33
10.5. DUKPT Level 3 Data Output Enhanced Format .........................................................................................................34
10.6. Additional Description........................................................................................................................................................39
10.6.1. T1, T2 or T3 Data Length:.....................................................................................................................................................................................39
10.7. How to get Encrypted Data Length ...............................................................................................................................40
11. ADDITIONAL SETTINGS..............................................................................................................................................................42
11.1. Decryption Example ...........................................................................................................................................................42
11.1.1. Security Level 3 Decryption - Original Encryption Format.............................................................................................................42
11.2. SecureMag Reader with Default Settings ...................................................................................................................42
11.2.1. Security Level 4 Decryption - Original Encryption Format.............................................................................................................44
11.2.2. Security Level 3 Decryption - Enhanced Encryption Format........................................................................................................45
11.3. Decrypted Data....................................................................................................................................................................48
11.3.1. Level 4 Activate Authentication Sequence ...............................................................................................................................................49
11.3.2. Activate Authentication Mode Command.................................................................................................................................................49
11.4. Authentication Mode Request ........................................................................................................................................49
11.5. Device Response .................................................................................................................................................................50
11.5.1. Pre-Authentication Time Limit..........................................................................................................................................................................50
11.6. Activation Challenge Reply Command..........................................................................................................................50
11.6.1. Activation Data............................................................................................................................................................................................................51
11.7. Deactivate Authenticated Mode Command................................................................................................................51
11.8. Get Reader Status Command..........................................................................................................................................52
12. APPENDIX A: MOUNTING DIMENSION INFORMATION ...................................................................................................53
13. APPENDIX B: SETTING CONFIGURATION PARAMETERS AND VALUES .....................................................................54
14. APPENDIX B: SETTING CONFIGURATION PARAMETERS AND VALUES .....................................................................55
15. APPENDIX C: KEY CODE TABLE IN USB KEYBOARD INTERFACE..................................................................................61
15.1. Appendix C: Ctrl or Alt Output..........................................................................................................................................65
15.2. Appendix C: Terms and Abbreviations ..........................................................................................................................66

SecureMag Encrypted MagStrip Reader User Manual
Page | 7
1. Introduction
ID TECH’s SecureMag prevents card holder information from being accessed when data is in-transit
or stored resulting in secure end to end transactions. The SecureMag reader delivers superior reading
performance with its ability to encrypt sensitive card data. The reader fully supports TDES and AES
data encryption using DUKPT Key management method. The SecureMag is offered in USB, RS232,
and PS2 interfaces.
1.1. Document Notations
Notations used throughout the document:
•Bold: is a boldface font indicates default setting value.
•‘2’: is a single quotation indicates ASCII characters, for example, ‘2’ is 32 in hex.
•“Number”: is a null terminated character string.
•<Len>: are angle brackets that indicate a specific character or character string in a command
or response.
•Hex: the hex character 53 is ‘5’ in ASCII or 83 in decimal. Sometimes hex characters are
represented with an h attached to the end, for example,53h.
•\02: is a way to show that the following number is in hex. It is used by the configuration
program.
2. Features and Benefits
•Bi-directional card reading
•Reads encoded data that meets ANSI, ISO, and AAMVA standards
•Custom formats such as ISO track 1 format on track 2 or 3
•Reads three tracks of card data
•An LED and beeper that provides the status of the reading operations.
•Compatible with USB specification Revision 2.0 (USB interface)
•Compatible with HID specification Version 1.1 (USB interface)
•Uses standard Windows HID driver for communications; no third-party device driver is
required (USB interface)
•Provides clear text confirmation data including card holder’s name and a portion of the PAN
as part of the Masked Track Data
•User friendly software for device configuration.
3. Applicable Documents
ISO 7810 – 1985
Identification Cards – Physical
ISO 7811 - 1 through 6
Identification Cards - Track 1 through 3
ISO 7816 - 1 through 4
Identification Cards - Integrated circuit cards with contacts
ISO 4909
Magnetic stripe content for track 3
ISO 7812
Identification Cards – Identification for issuers Part 1 & 2
ISO 7813
Identification Cards – Financial Transaction Cards
ANSI X.94
Retail Financial Services Symmetric Key Management

SecureMag Encrypted MagStrip Reader User Manual
Page | 8
4. Specifications
Power Consumption
5VDC +/- 10%
Maximum operating consumption is less than 50mA
RS232 interface: external power adaptor that supplies power through RS232
cable.
USB interface
: Is from host interface and no external power adaptor needed.
Swipe Speed
3 to 65 inches per second
Bi-directional
Indicators
Tri-color LED
•The LED is off while reading and decoding.
•The red indicates bad read.
•The green indicates a good read, or the machine is ready.
Beeper
•
A beeping sound indicates good read.
LED Indicator
2mmx5mm, Green/Red dual color under firmware control
Communication
Interface
RS232
•Baud Rate – 1200, 2400, 4800, 9600, 19200, 38400, 56700, 115200
•Data bits – 8
•Stop bits – 1 or 2
•Parity – off, odd, even, mark, or space
•Supports RTS/CTS hardware and Xon-Xoff software handshaking
USB
•Complies with USB 2.0 specification
PS2 Keyboard
•IBM PS2 interface compatible
Card Size
Supports cards that meet the ISO 7810 and 7811 1-7 standards.
Dimension
3.94 inches (length) by 1.38 inches (width) and 1.18 inches (height).
4.1. Interface Cable and Connector
RS232 interface:
•IDT standard RS232 Interface Cable
•DB-9 Female connector with 2mm power jack in the housing
•Standard cable length is 6 feet
Pin Out Table
J1*
Color
Signal
P1*
1
-
CASE_GND
SHELL
2
White
TXD
2
3
Green
RXD
3
4
Yellow
VCC
From power jack
5
Brown
RTS
8**
6
Grey
CTS
4**
7
Black
GND
5
*J1 is the connector to PCB end and P1 is DB-9 end

SecureMag Encrypted MagStrip Reader User Manual
Page | 9
** RTS and CTS are not used unless hardware handshaking support is enabled by Function ID 0x44
(Handshake)
USB
•IDT standard USB interface cable
•Series “A” plug
•Standard cable length is 6 feet
Pin Out Table
J1
Color
Signal
P1
1
-
CASE_GND
SHELL
3
GRN
+DATA
3
5
Red
V_IN
1
6
White
-DATA
2
7
BLK
GND
4
4.1.1. Keyboard Wedge
•IDT standard Keyboard Wedge cable.
•Y cable with dual PS/2 6-pin mini-DIN connectors; male side is connected to PC, female side
connected to KB.
•Standard cable length is 6 feet.
Pin Out Table
J1
Color
Signal
J2
J3
1
-
CASE_GND
SHELL
SHELL
2
White
P-CLK
5
--
3
Green
P-DATA
1
--
4
Yellow
VCC
4
4
5
Brown
K-CLK
--
5
6
Grey
K-DATA
--
1
7
Black
GND
3
3
4.1.2. PS/2 Connector

SecureMag Encrypted MagStrip Reader User Manual
Page | 10
5. Operations
The magnetic stripe must be facing towards the magnetic read head and may be swiped in either
direction. A card may be swiped through the reader slot when the LED is green. After swiped, the LED
will blank until the decoding process is completed. If the transaction is accepted, the reader will return
green. If declined, the reader will flash red before turning green again.
During a data transfer the LED will be powered off but will function again when the light returns to
green. A red LED indicates an error. The beeper will provide error indications by beeping for each
correctly read data track. Depending on the security level configured, the card data might be
displayed in clear or encrypted mode.
6. Command Process
Command Requests and Responses are sent and received from the device. For USB interface
devices, the commands are sent to the device using HID class specific request Set_Report (21 09
…). The response to a command is retrieved from the device using a HID class specific request
Get_Report (A1 01 …). These requests are sent over the default control pipe.
For RS232 interface devices, please see the commands listed below.
6.1. Function ID Table
The complete table of the Function ID used in command and response are listed in Appendix A.
It’s recommended to have at least a one second delay between the Setting Command and the Get
Settings Command.
6.2. Setting Command
The Setting command is a collection of many function-setting blocks in the following format:
Command
<STX><S><FuncSETBLOCK1>…<FuncBLOCKn><ETX><LRC>
Response
<ACK> or <NAK> for the wrong commands such as invalid funcID, length, and value.
Each function-setting block <FuncSETBLOCK> has the following format:
<FuncID><Len><FuncData>
Where:
<FuncID> is 1-byte identifying the setting(s) for the function.
<Len> is the length count for the following function-setting block <FuncData>.
<FuncData> is the current setting for this function. It has the same format as in the sending
command for this function.

SecureMag Encrypted MagStrip Reader User Manual
Page | 11
6.3. Get Setting
The Get Setting command retrieves the reader’s current settings.
Command
<STX> <R> <FuncID> <ETX> <LRC 1>
Response
<ACK> <STX> <FuncID> <Len> <FuncData> <ETX> <LRC 2>
<FuncID>, <Len> and <FuncData> retrieves the reader’s current settings.
Where:
Characters Hex Value Description
<STX>
02
Start of Text
<ETX>
03
End of Text
<ACK>
06
Acknowledge
<NAK>
15 for RS232 and
USB HID interface; FD
for USB KB interface
Negative Acknowledge
<UnknownID>
16
Warning: Unsupported ID in se
<AlreadyInPOS> 17
Warning: Reader already in OP
mode.
<R>
52
Review Setting
<S>
53
Send Setting
<LRC>
-
Xor’d all the data before LRC.
Reader Command Summary
ASCII
HEX
Name
Use
‘8’
38
Copyright Report
Requests reader’s copyright
notice.
‘9’
39
Version Report
Requests version string.
‘F”
46
Key Loading
Special command to load
encryption keys.
‘I’
49
Reader Reset
Reset the reader. Software reset
does not resend startup string
‘M’
4D
OPOS/ JPOS
Command
Command to enter OPOS or JPOS
mode.
‘P’
50
Arm and Disarm
to Read
Arm to Capture Buffer Mode
MSR.
‘Q’
51
Read Buffered
Data
Read Stored MSR Data.
‘R’
52
Read MSR
Options
Read various reader optional
settings.
‘S’
53
Set MSR Options
Set various reader optional
functions.

SecureMag Encrypted MagStrip Reader User Manual
Page | 12
6.4. Get Copyright Information
A ‘31-byte’ Copyright Notice will be returned:
02 38 03 39
Response:
ACK STX <Copyright String> ETX LRC
Response mixed with Hex and ASCII:
\06\02Copyright (c) 2010, ID TECH \03>
6.5. Version Report Command
02 39 03 38
Response:
ACK STX<Version String> ETX LRC
Response mixed with Hex and ASCII:
\06\02ID TECH TM3 SecureMag RS232 Reader V 3.19\03\LRC
6.6. Reader Reset Command
The reader supports a reset reader command and this command allows the host to return the
reader to its default state.
02 49 03 48
Response:
06
6.7. OPOS/JPOS Command
There are three forms of the command:
02 4D 01 30 03 7DEnter Standard Mode (Exit OPOS Mode)
02 4D 01 31 03 7CEnter OPOS Mode
02 4D 01 32 03 7F Enter JPOS Mode
Responses are as follows:
17 Reader already in OPOS Mode
15 Command failure (wrong length or wrong parameter)
06 Success
6.8. Arm or Disarm to Read Command
6.8.1. Arm to Read
This command enables the MSR to be ready for a card swipe in buffered mode.

SecureMag Encrypted MagStrip Reader User Manual
Page | 13
•Any previously read data will be erased and reader will wait for the next swipe.
•As the user swipes a card, the data will be saved but not be sent to the host.
•The reader holds the data until receiving the next “Arm to Read” or “MSR Reset” command.
Arm to Read
02 50 01 30 03 LRC
6.8.2. Disarm to Read
This command will disable MSR read and clear any magnetic data in buffered mode. The reader
enters to a disarmed state and will ignore MSR data.
Response is as follows:
Other possible response statuses:
NAK
'P' command length must be 1
NAK
'P' command must be 0x30 or 0x32
NAK
Reader not configured for buffered mode
NAK
Reader not configured for magstripe read
NAK for keyboard interface is FD and non-KB mode NAK is 15.
Disarm to Read
02 50 01 32 03 LRC
6.9. Read Buffered MSR Data Command
This command requests card data information for the buffered mode:
02 51 01 <Track Selection Option> 03 LRC
The <Track Select Option> byte:
‘0’
Any Track
‘1’
Track 1
‘2’
Track 2
‘3’
Track 1 and Track 2
‘4’
Track 3
‘5’
Track 1 and Track 3
‘6’
Track 2 and Track 3
‘7’
Track 1, Track 2 and Track 3
‘8’
Track 1 or Track 2
‘9’
Track 2 or Track 3
The selected MSR data is sent to the host with or without envelope format, according to the
operation mode setting.
This command does not erase the data.

SecureMag Encrypted MagStrip Reader User Manual
Page | 14
Response:
06 02 <Len_H> <Len_L> <MSR Data> 03 LRC
Other possible response statuses:
•18 'Q' command length must be 1
•18 Reader not configured for buffered mode
•NAK Already armed
NAK for keyboard interface is FD, non-KB mode NAK is 15
6.10. Read MSR Options Command
02 52 1F 03 LRC
<Response> format:
The current setting data block is a collection of many function-setting blocks <FuncSETBLOCK> as
follows:
<STX><FuncSETBLOCK1>…<FuncSETBLOCKn><ETX><CheckSum>
Each function-setting block <FuncSETBLOCK> has the following format:
<FuncID><Len><FuncData>
Where:
•<FuncID> is 1-byte identifying the setting(s) for the function.
•<Len> is a 1-byte length count for the following function-setting block <FuncData>.
•<FuncData> is the current setting for this function. It has the same format as in the sending
command for this function.
•<FuncSETBLOCK> are in the order of their Function ID<FuncID>.
6.11. Set MSR Options Command
The default value is listed in bold.
6.11.1. Beep Volume
The beep volume and frequency can be each adjusted to two different levels or turned off.
02 53 11 01 <Beep Settings>03 LRC
Beep Settings:
‘0’ for beep volume off
‘1’ for beep volume high, low frequency
‘2’ for beep volume high, high frequency
‘3’ for beep volume low, high frequency
‘4’ for beep volume low, low frequency

SecureMag Encrypted MagStrip Reader User Manual
Page | 15
Change to Default Settings:
02 53 18 03 LRC
This command does not have any <FuncData>. It returns all non-security settings for all groups to
their default values.

SecureMag Encrypted MagStrip Reader User Manual
Page | 16
7. MSR Reading Settings:
02 53 1A 01<MSR Reading Settings> 03 LRC
‘0’ MSR Reading Disabled
‘1’ MSR Reading Enabled
7.1. Decoding Method Settings
02 53 1D 01<Decoding Method Settings> 03 LRC
Decoding Method Settings:
•‘0’ Raw Data Decoding in Both Directions
•‘1’ Decoding in Both Directions
•‘2’ Moving stripe along head in direction of encoding
•‘3’ Moving stripe along head against direction of encoding
Bi-Directional Method: the user can swipe the card in either direction and the reader still processes
the data encoded on the magnetic stripe.
Raw Decoding: sends the card’s magnetic data in groups of 4 bits per character. There is no checking
done except to verify track has or does not have magnetic data.
7.2. Terminator Setting
Terminator characters are used to end a string of data in some applications.
02 53 21 01 <Terminator Settings> 03 LRC
<Terminator Settings>
Any one character, 00h is none; default is CR (0Dh).
7.3. Preamble Setting
Characters can be added to the beginning of a string of data. These can be special characters for
identifying a specific reading station, to format a message header expected by the receiving host, or
any other character string.
Up to fifteen ASCII characters can be defined.
02 53 D2 <Len><Preamble> 03 LRC
Where:
Len = the number of bytes of Preamble string
Preamble = {string length} {string}
Note: String length is one byte, maximum fifteen <0Fh>.

SecureMag Encrypted MagStrip Reader User Manual
Page | 17
7.4. Postamble Setting
The Postamble serves the same purpose as the Preamble, except it is added to the end of the data
string, after any terminator characters.
02 53 D3 <Len><Postamble> 03 LRC
Where:
Len = the number of bytes of postamble string
Postamble = {string length}{string}
Note: String length is one byte, maximum fifteen <0Fh>.
7.5. Track n Prefix Setting
Characters can be added to the beginning of a track data. These can be special characters to identify
the specific track to the receiving host, or any other character string. Up to six ASCII characters can be
defined.
02 53 <n><Len><Prefix> 03 LRC
Where:
n is 34h for track 1; 35h for track 2 and 36h for track 3
Len = the number of bytes of prefix string
Prefix = {string length}{string}
Note: String length is one byte
7.6. Track x Suffix Setting
Characters can be added to the end of track data. These can be special characters to identify the
specific track to the receiving host, or any other character string. Up to six ASCII characters can be
defined.
02 53 <n><Len><Suffix> 03 LRC
Where:
n is 37h for track 1; 38h for track 2 and 39h for track 3
Len = the number of bytes of suffix string
Suffix = {string length}{string}
Note:String length is 1-byte, maximum six.

SecureMag Encrypted MagStrip Reader User Manual
Page | 18
7.7. Track Selection
There are up to three tracks of encoded data on a magnetic stripe.
This option selects the tracks that will be read and decoded.
02 53 13 01 <Track_Selection Settings> 03 LRC
<Track_Selection Settings>
‘0’ Any Track
‘1’ Require Track 1 Only
‘2’ Require Track 2 Only
‘3’ Require Track 1 & Track 2
‘4’ Require Track 3 Only
‘5’ Require Track 1 & Track 3
‘6’ Require Track 2 & Track 3
‘7’ Require All Three Tracks
‘8’ Any Track 1 & 2
‘9’ Any Track 2 & 3
Note:If any of the required multiple tracks fail to read for any reason, no data for any track will be
sent.
7.8. Track Separator Selection
Allows a user to select the character that separates data decoded by a multiple-track reader.
02 53 17 01 <Track_Separator> 03 LRC
<Track_Separator> is one ASCII Character.
The default value is CR, 0h means no track separator.
7.9. Start and End Sentinel (Track 2 Account Number Only)
The SecureMag can be set to Send or Not Send, the Start or End sentinel, and to send either the
Track 2 account number only, or all the encoded data on Track 2. (The Track 2 account number setting
doesn’t affect the output of Track 1 and Track 3.)
02 53 19 01 <SendOption> 03 LRC
<SendOption>
•‘0’ Don’t send start and end sentinel and send all data on Track 2.
•‘1’ Send start and end sentinel and send all data on Track 2.
•‘2’ Don’t send start and end sentinel and send account # on Track 2.
•‘3’ Send start and end sentinel and send account number on Track 2.

SecureMag Encrypted MagStrip Reader User Manual
Page | 19
8. Security Features
The reader features configurable security settings. Before encryption can be enabled, Key Serial
Number (KSN) and Base Derivation Key (BDK) must be loaded before encrypted transactions can take
place. The keys are to be injected by certified key injection facility.
There are five Security Level available on the reader as specified in the followings:
Level 0
Security Level 0 is a special case where all DUKPT keys have been used and reset automatically
when it runs out of DUKPT keys. The lifetime of DUKPT keys is 1 million. Once the key’s end life is
reached, the user should inject DUKPT keys again before doing any more transactions.
Level 1
By default, readers from the factory are configured to have this security level. There is no
encryption process and no key serial number is transmitted with decoded data. The reader
functions as a non-encrypting reader and the decoded track data is sent out in default mode.
Level 2
Key Serial Number and Base Derivation Key have been injected but the encryption process is not
yet activated. The reader will send out decoded track data in default format. Setting the encryption
type to TDES and AES will change the reader to Security Level 3.
Level 3
Both the Key Serial Number and Base Derivation Keys are injected and then Encryption Mode is
turned on. For payment cards, both encrypted data and masked clear text data are sent out. Users
can select the data masking of the PAN area; the encrypted data format cannot be modified. Users
can choose whether to send hashed data and whether to reveal the card expiration date.
Level 4
When the reader is at Security Level 4, a correctly executed Authentication Sequence is required
before the reader sends out data for a card swipe. Commands that require security must be sent
with a 4-byte Message Authentication Code (MAC) at the end.
Note
: Data supplied to MAC algorithm should NOT be converted to ASCII-Hex, rather it should be
supplied in its raw binary form. Calculating MAC requires knowledge of current DUKPT KSN which
can be retrieved with the Get
DUKPT KSN
and
Counte
r command.
Default reader properties are configured to have Security Level 1 (no encryption). In order to output
encrypted data, the key must be injected into the reader while the encryption feature enabled. The
reader will configure to Security Level 2, 3 or 4 and it cannot be reverted to a lower security level.
8.1. Encryption Management
The Encrypted swipe read supports TDES and AES encryption standards for data encryption.
Encryption can be turned on via a command. TDES is the default.

SecureMag Encrypted MagStrip Reader User Manual
Page | 20
If the reader is in Security Level 3, for the encrypted fields, the original data is encrypted using the
TDES/AES CBC mode with an Initialization Vector starting at all binary zeroes and the Encryption Key
associated with the current DUKPT KSN.
8.2. Check Card Format
ISO/ABA (American Banking Association) Card (card type 0)
Encoding Method:
•Track1 is 7 bits encoding.
•Track1 is 7 bits encoding.
•Track2 is 5 bits encoding.
•Track3 is 5 bits encoding.
•Track1 is 7 bits encoding.
•Track2 is 5 bits encoding.
•Track2 is 5 bits encoding.
Additional check
•Track1 2nd byte is ‘B’.
•There is only one ‘=’ in track 2 and the position of ‘=’ is between 13th ~ 20th character so
account number length is 12-19 digits.
•Total length of track 2 is above 19 characters.
AAMVA (American Association of Motor Vehicle Administration) Card
Encoding method:
•Track1 is 7 bits encoding. Track2 is 5 bits encoding. Track3 is 7 bits encoding.
•Others (Customer card)
8.3. MSR Data Market
For ABA Card Data (Card Type 0)
For cards need to be encrypted, both encrypted data and clear text data are sent.
Masked Area
•The data format of each masked track is ASCII.
•The clear data include start and end sentinels, separators, first N, last M digits of the PAN,
card holder name (for Track1).
The rest of the characters should be masked using mask character.
Set PrePANClrData (N), PostPANClrData (M), MaskChar (Mask Character)
N and M are configurable and default to 4 first and 4 last digits. They follow the current PCI
constraints requirements (N 6, M 4 maximum).
Mask character default value is ‘*’.
•Set PrePANClrDataID (N), parameter range 00h ~ 06h, default value 04h