Ultralight EV1 specific command APDU

Forum / MIFARE general topics and applications / Ultralight EV1 specific command APDU

Tagged: , , ,

  • 15. January 2016 at 11:42
    I'm working with Ultralight EV1 tags, and am using the EV1 additional command (PWD_AUTH, INCR_CNTR).

    Are there any APDU (CLA/INS) definitions to access these commands ?

    On one platform I'm using ACR122 (PN532) with pseudo passthrough APDU (FF-00) with InDataExchange and InCommunicateThru structures to send the native Ultralight EV1 commands.

    On the other platform (WM10 + PN547) these commands are not available but I still need to use the extra EV1 commands.

    As the GET_VERSION (0x60) was the same as for Desfire EV1 (which I have working on both platforms) I tried these commands but the Ultralight EV1 does not respond (0x90, 0x60, 0x0, 0x0 for instance)
    + 0  |  - 0

    Re: Ultralight EV1 specific command APDU

    19. January 2016 at 13:42
    Hi Maurice,

    using the one-way-counter on the UltraLight EV1 you have to use separate commands. You cannot use
    for reading the counter value, you have to use
    . The initial value is 00000000 and you can set any arbitrary value with the

    For further details of the opcode, please refer to:


    Kind regards,
    The MIFARE Team

    + 0  |  - 0

    Re: Ultralight EV1 specific command APDU

    19. January 2016 at 14:52
    I know the extra commands (and as I mentioned I used the APDU passthrough of the ACR122 with PN532 commands to get it working for ACR122).

    I managed to get things working on the PN547 by starting a transparent session, sending envelope APDU and ending the transparent session. But this is not optimal as the read is shared and the multi statement and transparent mode are conflicting with the OS (WM10).
    + 0  |  - 0

    Re: Ultralight EV1 specific command APDU

    2. March 2017 at 15:40

    I'm trying to use the PWD_AUTH command using an ACR1222L reader. I'm trying sending APDUs {e0 00 00 24 07 1b ff ff ff ff 63 00} and {ff 00 00 00 07 1b ff ff ff ff 63 00} but so far no luck.

    Is this the correct formar for the pseudo APDu?

    Thanks in advance
    + 0  |  - 0
Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.