DevelopersKeycard API
GET STATUS
16 Oct 2026

  • CLA = 0x80
  • INS = 0xF2
  • P1 = 0x00 for application status
  • P2 = 0x00
  • Response SW = 0x9000 on success, 0x6A86 on undefined P1
  • Response Data = Application Status Template
  • Preconditions: Secure Channel must be opened

Response Data format:

  • Tag 0xA3 = Application Status Template
    • Tag 0x02 = PIN retry count (1 byte)
    • Tag 0x02 = PUK retry count (1 byte)
    • Tag 0x01 = 0xff if key is initialized, 0 otherwise

This must be implemented even if Credential and/or Key management is not implemented. If the PIN/PUK retry count is not available or is not applicable, its value should be set to 0xff.

Before 4.0, P1 = 0x01 returned the current key path as a sequence of 32-bit numbers, empty when the master key was selected. There is no current key path anymore as every SIGN and EXPORT KEY carries its own path, so P1 = 0x01 now returns 0x6A86.

Last edited
16 Oct 2026