Configuring MIFARE DESFire in Security Center - Security Center 5.9

Security Center Administrator Guide 5.9

Applies to
Security Center 5.9
Last updated
Content type
Guides > Administrator guides
Security Center

To encode MIFARE DESFire key cards or re-encode cards that were configured with a third-party production tool, you must create the configuration in Config Tool.

Before you begin

Make sure that your Security Center license supports MIFARE DESFire configuration.

What you should know

MIFARE DESFire EV1/EV2 is a 128-bit, Advanced Encryption Standard (AES)-based protocol for which the customer defines the keys.


  1. Open the MIFARE DESFire configuration task.
  2. Below the MIFARE DESFire configuration list, click Add an item ().
  3. In the dialog box that opens, enter a name for the configuration you are creating.
  4. Do one of the following:
    • To enable Security Center to recognize a pre-encoded card, enter a name into the Configuration name field, then complete the fields to match the card.
    • To encode a new card or re-encode an existing card, select the Card encoding checkbox, then set the values for your new configuration.
      NOTE: Enabling Card encoding opens three options for the kind of configuration file you will create.
  5. If you are encoding or re-encoding a card, select an option:
    • Format card: Delete all information on the card before creating an application.
    • Update the app master key: Change the master key of the application on the card.
    • Free create: Enable the creation of applications even when the card master key is unknown.
  6. Click OK, then click Save.
    If you have multiple configurations in the MIFARE DESFire configurations list, selecting a configuration activates it.
  7. (Optional) Click Read mode and badge a key card to verify the configuration.
    Cards that match the active configuration are read properly; badging a card that uses a different configuration than the one you selected returns a failed read.
  8. (Optional) Encode or re-encode a card:
    1. Select a configuration from the MIFARE DESFire configuration list.
    2. Click Write mode.
    3. Badge a card.
    The card is encoded or re-encoded to match the active configuration.
  9. Export the configurations to a SmartCardsSites.xml file:
    1. Click Export and save the SmartCardsSites.xml file to your local hard drive.
    2. Log on to the Synergis™ Appliance Portal and upload the SmartCardsSites.xml file to your Synergis™ unit.
    3. Copy the SmartCardsSites.xml file to the Security Center installation folder of each workstation being used to configure MIFARE DESFire credentials.