Configuring MIFARE DESFire in Security Center - Security Center 5.12

Security Center Administrator Guide 5.12

Product
Security Center
Content type
Guides > Administrator guides
Version
5.12
Language
English
Last updated
2024-09-13

To encode MIFARE DESFire key cards or re-encode cards that were configured with a third-party production tool, you must create the configuration in Config Tool.

Before you begin

Ensure that your Security Center license supports MIFARE DESFire configuration.

What you should know

MIFARE DESFire EV1/EV2 is a 128-bit, Advanced Encryption Standard (AES)-based protocol for which you define the keys.

Procedure

  1. From the Config Tool homepage, open the MIFARE DESFire configuration task.
  2. From the MIFARE DESFire configuration list, click Add an item ().
    Each MIFARE DESFire configuration corresponds to one application.
  3. In the Badge configuration section, enter a name in the Configuration name field, and then do one of the following:
    • To enable Security Center to recognize a pre-encoded card, complete the fields to match the card.
    • To encode a new card or re-encode an existing card, select the Card encoding checkbox, and then set the values for your new configuration.

      For more information about how to encode cardholder information on the card, see Encoding cardholder information on MIFARE DESFire cards.

      NOTE: Enabling Card encoding opens three options for the kind of configuration file that you will create.
  4. If you are encoding or re-encoding a card, select an option:
    Format card
    Delete all information on the card before creating an application.
    Free create
    Enable the creation of applications even when the card master key is unknown.
    Old application master key
    Change the master key of the application on the card.
  5. Click Save.
    If you have multiple configurations in the MIFARE DESFire configuration list, selecting a configuration activates it.
  6. Verify the configuration:
    1. Click the Test USB reader tab.
    2. Select a configuration from the MIFARE DESFire configuration list.
    3. Click Read mode.
    4. Badge a card.
    If the card matches the active configuration, it is read properly. If the card uses a different configuration than the one you selected, it returns a failed read.
  7. To encode or re-encode a card:
    1. Click the Test USB reader tab.
    2. Select a configuration from the MIFARE DESFire configuration list.
    3. Click Write mode.
    4. Badge a card.
    The card is encoded or re-encoded to match the active configuration.