One card for 2N Fortis and 2N Picard at the same time

This article explains, how to program one user MIFARE DESFire card or fob so it works with both 2N PICard Commander and 2N Fortis for access

A Mifare DESFire card is designed to hold multiple secure applications side by side.

Each product stores its credentials in its own protected “area” of the card. 

As long as both products follow the setup order, they won’t interfere with each other. 

This means one physical card can carry credentials from both products, so your users only need to carry one card instead of two.

Requirements

  • Mifare DESFire EV2 or EV3 card (while EV1 cards still work for 2N Fortis, it will not work for 2N PICard Commander). These are supported by both products and ensure the best compatibility and security. 
  • 2N OS firmware 2.49.0 or newer
  • 2N Access Commander 3.4.2 or newer
  • Except the card types mentioned above all the other requirements for 2N Fortis and 2N PICard Commander also apply. For more details about other requrements and information how to program the user card in 2N PICard Commander and for 2N Fortis, please see the respective articles:

MIFARE DESFire EV2/EV3 - How to install 2N PICard Commander and program cards

2N Fortis deployment: Setup and Management with 2N Access Commander

Correct setup order

To make sure everything works smoothly, you need to program the user card or fob in the right order:

  • First programm the user card or fob in 2N PICard Commander.

    • This step creates PICard Commander’s secure application  holding secure credentia area on the card.

    • Do not reformat the card or change global card settings later.
    • While programming you need to use same Master key (MEK) and PICC key as you are going to use later for 2N Fortis programming  
    • For programming user card  in 2N PICard Comamnder please refer to MIFARE DESFire EV2/EV3 - How to install 2N PICard Commander and program cards
  • Then use 2N Fortis to add its application holding secure credential to card.

Once both steps are complete, the card contains two independent sets of credentials and can be used in both systems.

Following the correct order avoids conflicts and ensures both applications are stored on Mifare DESfire properly. 

Czy ta strona była pomocna?