Configuring MIFARE DESFire in Security Center - Security Center 5.12

Security Center Administrator Guide 5.12

Product
Security Center
Content type
Guides > Administrator guides
Version
5.12
ft:locale
en-US
Last updated
2025-01-28

To encode MIFARE DESFire key cards or re-encode cards that were configured with a third-party production tool, you must create the configuration in Config Tool.

Before you begin

Ensure that your Security Center license supports the following options:
  • MIFARE DESFire configuration
  • Smart card encoding

What you should know

MIFARE DESFire EV1/EV2/EV3 is a 128-bit, Advanced Encryption Standard (AES)-based protocol for which you define the keys.

Procedure

  1. From the Config Tool homepage, open the MIFARE DESFire configuration task.
  2. From the MIFARE DESFire configuration list, click Add an item ().
    Each MIFARE DESFire configuration corresponds to one application.
  3. In the Badge configuration section, enter a name in the Configuration name field, and then do one of the following:
    • To enable Security Center to recognize a pre-encoded card, complete the fields to match the card.
    • To encode a new card or re-encode an existing card, select the Card encoding checkbox, and then set the values for your new configuration.

      For more information about how to encode cardholder information on the card, see Encoding cardholder information on MIFARE DESFire cards.

      NOTE: Enabling Card encoding opens three options for the kind of configuration file that you will create.
  4. If you are encoding or re-encoding a card, select an option:
    Format card
    Delete all information on the card before creating an application.
    Free create
    Enable the system to complete the encoding process for cards pre-configured by a third party. This is achieved by modifying key values and adding files to the existing application. This option does not require the card master key.
  5. (Optional) In the middle column, select the Old application master key option to change the master key of the application on the card.
  6. Click Save.
    If you have multiple configurations in the MIFARE DESFire configuration list, selecting a configuration activates it.
  7. Verify the configuration:
    1. Click the Test USB reader tab.
    2. Select a configuration from the MIFARE DESFire configuration list.
    3. Click Read mode.
    4. Badge a card.
    If the card matches the active configuration, it is read properly. If the card uses a different configuration than the one you selected, it returns a failed read.
  8. To encode or re-encode a card:
    1. Click the Test USB reader tab.
    2. Select a configuration from the MIFARE DESFire configuration list.
    3. Click Write mode.
    4. Badge a card.
    The card is encoded or re-encoded to match the active configuration.