# XPI\_Release Notes\_XX.05.20.00 ## Introduction ### About this document This Release Notes document contains information about the XPI 19.05/20.05 series application builds and releases. This document includes: * Software components used * Application version and build date * Application changes or enhancements * Issues or defects fixed * List of known issues ## Release Information ### XPI 19.05.20.00 / XPI 20.05.20.00 #### Build Summary | **Release Date** | December 06 2024 | | | ------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------- | | **Applications** | 19.05.20.00-1932, 20.05.20.00-1932 | | | **Terminals Supported** | M400, e280, e285, e235 | | | **OS Versions** | 32410900 (VOS2) | | | **SDK Versions** | 32410900 (VOS2) | | | **ADK Versions** | 4.10.5.2-1875 | | | **VCL Version** | 12.7.6 | | | **VHQ Agent** | 5.1.5.2-5 | | | **Android Version** | N/A | | | **COMM Types** | Ethernet, WIFI, USB, Serial | | | **NAFG Lib** | 5.1.3-0 (VOS2) | | | **Encryption** | VSP, ADE. PKI, PKE, TRA | | | **EMV CT Kernels** | pYFLceZWcbWZ | | | **XPI Version Series** | **VOS** | **VOS2** | | XPI 19.XX | 7.0.2l | 7.0.2r | | XPI 20.XX | 7.0.3l | 7.0.3r | | **EMV CTLS Kernels** | VN9k5NTpx1ta | | | \*\*V3 (Default)\*\***EMV\_DESIRED : 1.3.0/2.3.0** | | | | **Kernel Name** | **VOS** | **VOS2** | | Entry point Kernel (EMVCo) | 2.0.4l | 2.0.4r | | Amex (ExpressPay 3.1) | 2.0.5l | 2.0.5r | | China Union Pay (UPI 2020) | 1.1.0l | 1.1.0r | | Discover (DPAS 1.0) | 2.0.0l | 2.0.0r | | Interac (Interac Flash 1.5b - Engage, M440 Interac Flash 1.6 - UX301/UX401, Interac Flash 1.7 - UX300/UX400, UX410, M424) | 1.0.5l | 1.0.4r, 1.0.6r (M424) | | JCB (JCB 1.3) | 1.0.1l | 1.0.0r | | Mastercard (MasterCard 3.1.1) | 2.2.1l | 2.2.1r | | VISA (Visa 2.1.3 - UX300, Engage, Visa 2.2 - UX410) | 2.1.5l(UX300) / 2.2.3l(UX410) | 2.1.5r | | | oFdiMTCmA01F | | | **V4\*\*\*\*EMV\_DESIRED : 1.4.0/2.4.0** | | | | **Kernel Name** | **VOS** | **VOS2** | | Entry point Kernel (EMVCo) | 3.0.4l | 3.0.4r | | Amex (Expresspay 4.0.2) | 3.0.5l | 3.0.5r | | China Union Pay (UPI 2020) | 1.1.0l | 1.1.0r | | Discover (DPAS 2.0) | 3.0.5l | 3.0.5r | | Interac (Interac Flash 1.6 - UX301/UX401, Interac Flash 1.7 - UX300/UX400, UX410, Engage, M440, M424) | 1.0.5l | 1.0.6r | | JCB (JCB 1.4) | 1.1.0l | 1.1.0r | | Mastercard (MasterCard 3.1.3) | 3.0.1l | 3.0.1r | | VISA (Visa 2.2) | 3.0.2l | 3.0.2r | | | DM7tajTE8HUI | | | **V4.5\*\*\*\*EMV\_DESIRED : 1.5.0/2.5.0** | | | | **Kernel Name** | **VOS** | **VOS2** | | Entry point Kernel (EMVCo) | 3.0.4l | 3.0.4r | | Amex (Expresspay 4.0.2) | 3.0.5l | 3.0.5r | | China Union Pay (UPI 2020) | 1.1.0l | 1.1.0r | | Discover (DPAS 2.0) | 3.0.5l | 3.0.5r | | Interac (Interac Flash 1.7 - UX300/UX400, Interac Flash 1.8 - UX410, Engage, M440, M424) | 1.0.5l, 1.0.7l | 1.0.7r | | JCB (JCB 1.4) | 1.1.0l | 1.1.0r | | Mastercard (MasterCard 3.1.3) | 3.0.1l | 3.0.1r | | VISA (Visa 2.2) | 3.0.2l | 3.0.2r | | | XPBr9PfHwuQU | | | **V5\*\*\*\*EMV\_DESIRED : 1.7.0/2.7.0** | | | | **Kernel Name** | **VOS** | **VOS2** | | Entry point Kernel (EMVCo) | 3.0.4l | 3.0.4r | | Amex (Expresspay 4.0.2) | 3.0.5l | 3.0.5r | | China Union Pay (UPI 2020) | 1.1.0l | 1.1.0r | | Discover (DPAS 2.0) | 3.0.5l | 3.0.5r | | Interac (Interac Flash 1.8) | 1.0.7l | 1.0.7r | | JCB (JCB 1.4) | 1.1.0l | 1.1.0r | | Mastercard (MasterCard 3.1.3) | 3.0.1l | 3.0.1r | | VISA (Visa 2.2) | 3.0.2l | 3.0.2r | | **APM Versions** | N/A | | | **Documents** |

Following is the list of related documents to be referred for this release:

| | | **EMV Desired Package Version** | 2sjhguMQNTLr | | | **XPI Version Series** | **EMV Desired Package Version** | | | XPI 19.XX | 1.3.0, 1.4.0, 1.5.0, 1.7.0 | | | XPI 20.XX | 2.3.0, 2.4.0, 2.5.0, 2.7.0 | | | **Collis** | btt-561-update-20231031 | | | ![](/files/845411ae4e4f5066f261d7c5802bb8edc34e4327)**NOTE** | The CTLS kernel versions in Engage terminals may vary depending on the terminal type. This should be checked and modified (if needed) before providing to the customer as per the certification level. The certified applications can stay on their respective CTLS versions unless there is a reason for moving to a newer version. | | ------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | #### What’s New? Modified Files * CAMCORE Binaries * Forms Processor Binaries * SAC Binaries * XPI configuration Enhancements * Kernel Decision passing for CT & CTLS transactions\ A new custom tag 0x9FA081 has been introduced for providing the kernel decision for CT/CTLS transactions in C30/C32/F30/F32 command responses. The value is: * 0x00 — Kernel decision is declined (AAC) * 0x40 — Kernel decision is offline approved (TC) * 0x80 — Kernel decision is request online (ARQC) Availability conditions: * C30 — Only for CTLS transactions * C32 — Only for Contact transactions * C34 — The tag will not be present * F30 — For both CT (if the F30 command processes the transaction till GenAC1) & CTLS transactions * F32 — For contact transactions * F34 — The tag will not be present * Support for updating TVR (EMV Tag 0x95) value for Discover EMV CTLS for Online PIN Bypassed Scenario\ XPI has been enhanced to add support for providing the modified TVR value for Discover EMV CTLS transactions when online PIN is bypassed. This functionality is controlled by a new parameter: * Name: TVR\_UPDATE * File/Section: CAMCORE.INI / \[CPXPI.Config] * Values: * 0 — Do not update TVR for Discover EMV CTLS transactions (Default) * 1 — Update TVR for Discover EMV CTLS transactions * Description: When enabled and online PIN is bypassed for a Discover EMV CTLS transaction, XPI will set TVR byte 3 bit 4 (“PIN entry required, PIN pad present, but PIN was not entered”) and unset TVR byte 3 bit 3 (“Online PIN Entered”). #### Fixed Issues * RESAMDOCS-27386 / VS-231370 — Change to address accepting Apple Pay transactions when Mifare (NFC PASSTHROUGH) functionality is enabled. * RESAMDOCS-27469 / VS-238491 — S95 response truncation fix: S9510 requests will return field 14 as “Not Available” and continue returning remaining fields when an invalid EMV CT configuration is loaded via D50. Also, S95 with partial/individual fields will return an error code “01” if any requested field cannot be retrieved. * RESAMDOCS-25484 — Added check for track-2 length when firmware returns NO error for track-2 but track-2 is configured mandatory; prompts for re-swipe when necessary. * RESAMDOCS-27970 / VS-248175 — Fixes related to master key injection (Interac Master session functionality) via S83 command. * ANC-43315 — CAMCORE changed to handle back-to-back F30 differently. New config parameter: * Name: B2BF30MODE * Location: config.usr1/\[reg] * Values: * 0 — Usual behavior: Attempt to cancel the first transaction then re-enable the reader with the 2nd F30 (Default) * 1 — SCA Mode: Use only the amount from the 2nd F30 and attempt to update the first F30 transaction. In this mode the app will attempt to add/remove card entry modes based on the 2nd F30 request. The new amount will be used if the transaction hasn't passed the point where the new amount cannot be used by ADK-EMV layer. * ANC-41090 — XPI optimized handling of LSET (Last set encryption type) data. #### Limitations / Known Issues * Voltage encryption is not supported on this release. * WIC is not yet supported/tested for this release. * XDLD command is not working on e2xx devices (tracked in ANC-43879). *** ### XPI 19.05.19.00 / XPI 20.05.19.00 #### Build Summary | **Release Date** | September 30 2024 | | | ------------------------------- | -------------------------------------------------------------------------------------------------------- | -------- | | **Applications** | 19.05.19.00-1859, 20.05.19.00-1859 | | | **Terminals Supported** | M400, e280, e285, e235 | | | **OS Versions** | 32410800 (VOS2) | | | **SDK Versions** | 32410800 (VOS2) | | | **ADK Versions** | 4.10.4.1-1843 | | | **VCL Version** | 12.7.6 | | | **VHQ Agent** | 5.1.4.0-792 | | | **Android Version** | N/A | | | **COMM Types** | Ethernet, WIFI, USB, Serial | | | **NAFG Lib** | 5.1.2-4 (VOS2) | | | **Encryption** | VSP, ADE. PKI, PKE, TRA | | | **EMV CT Kernels** | XQami1c1csHa | | | **XPI Version Series** | **VOS** | **VOS2** | | XPI 19.XX | 7.0.2l | 7.0.2r | | XPI 20.XX | 7.0.3l | 7.0.3r | | **EMV CTLS Kernels** | ...same kernel tables as other builds... | | | **APM Versions** | N/A | | | **Documents** | | | | **EMV Desired Package Version** | nIudxpaqO2h7 | | | XPI 19.XX | 1.3.0, 1.4.0, 1.5.0, 1.7.0 | | | XPI 20.XX | 2.3.0, 2.4.0, 2.5.0, 2.7.0 | | | **Collis** | btt-561-update-20231031 | | | ![](/files/845411ae4e4f5066f261d7c5802bb8edc34e4327)**NOTE** | The CTLS kernel versions in Engage terminals may vary depending on the terminal type. This should be checked and modified (if needed) before providing to the customer as per the certification level. The certified applications can stay on their respective CTLS versions unless there is a reason for moving to a newer version. | | ------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | #### What’s New? Modified Files * CAMCORE Binaries * Forms Processor Binaries * SAC Binaries * XPI configuration Enhancements * D01 Command support\ XPI adds support for the D01 command which provides control over PIN bypass functionality for Chip and Contactless transactions with C30/C32/F30/F32 commands. Parameters: * D01PINBYPASS\_PER\_SESSION (Location: CAMCORE.INI) * Restricts D01 PIN bypass per session. When enabled, the D01 PIN bypass configuration is valid only for that session. * Values: 0 (Disabled, Default), 1 (Enabled) * EMV\_PINBYPASSFLAG * Set based on the D01 command sent by POS and controls PIN bypass functionality. * Values: 2 byte: 00, 01, 10, 11 * B1 — Online PIN bypass enable/disable * B2 — Offline PIN bypass enable/disable (optional). If B2 is not included in D01, the OfflinePINBypass parameter from EMVTABLES.INI or CTLSCONFIG.INI will be used. * Location ID / VHQ DID support\ Support for updating Device ID to VHQ via XSETVAR/M41/M44 commands. Enable by setting VHQENABLED = 1 in SAUIPARAMS.INI under \[SAUI.MISC]. POS/Integrators can use VHQDEVID to set device id to VHQ. * POS\_STORE sets StoreID to VHQ (Custom Identifier/LocationID) * POS\_LANE sets LaneID to VHQ (Custom Identifier) * Bluetooth QR Code pairing screen enhancement\ BT QR Code screen now displays custom text in readable format on the application controlled IDLE screen. Text can be customized using CTLG file with "BTPairing" msg. #### Fixed Issues * ANC-39481 — HTML/CSS updated to support two lines for static text on E235 idle QR code screen. * ANC-40964 — Fixed incorrect FS index when fetching AES DUKPT PIN key details via XGKS; appends FS correctly. * ANC-41444 — Adjusted buffer size for Z62 PIN entry using AES DUKPT PIN to accommodate 24-byte KSN and avoid garbage data from buffer overflow. #### Limitations / Known Issues * ANC-39439 — For Bluetooth pairing, already paired devices may be disconnected and unable to reconnect until the device is "Forgotten" and re-discovered. Expected behavior is for the IPAD to allow reconnect without "Forget Device". *** ### XPI 19.05.18.00 / XPI 20.05.18.00 #### Build Summary | **Release Date** | July 31 2024 | | ------------------------------- | -------------------------------------------------------------------------------------------------------- | | **Applications** | 19.05.18.00-1775, 20.05.18.00-1775 | | **Terminals Supported** | M400, e280, e285, e235 | | **OS Versions** | 32410500 (VOS2) | | **SDK Versions** | 32410500 (VOS2) | | **ADK Versions** | 4.10.3-1810 | | **VCL Version** | 12.7.1 | | **VHQ Agent** | 5.1.4.0-792 | | **Android Version** | N/A | | **COMM Types** | Ethernet, WIFI, USB, Serial | | **NAFG Lib** | 5.1.2-4 (VOS2) | | **Encryption** | VSP, ADE. PKI, PKE, TRA | | **EMV CT Kernels** | ...same CT kernel table... | | **EMV CTLS Kernels** | ...same CTLS kernel tables... | | **APM Versions** | N/A | | **Documents** | | | **EMV Desired Package Version** | ...same EMV desired package versions... | | **Collis** | btt-561-update-20231031 | | ![](/files/845411ae4e4f5066f261d7c5802bb8edc34e4327)**NOTE** | The CTLS kernel versions in Engage terminals may vary depending on the terminal type. This should be checked and modified (if needed) before providing to the customer as per the certification level. The certified applications can stay on their respective CTLS versions unless there is a reason for moving to a newer version. | | ------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | #### What’s New? Modified Files * CAMCORE Binaries * Forms Processor Binaries * SAC Binaries * XPI configuration Enhancements * E235 Device support\ Added support for E235 device. For e235 device, the minimum CTLS kernel version certified is v4.5. Use v4.5 or v5 CTLS kernel set when releasing any merchant solution with e235. * AES DUKPT PIN Support\ Added support for AES DUKPT PIN. PINSEC parameter updated to support new value "IPPAES". XPI can support up to 10 AES DUKPT keys. Selection controlled via AESDUKPTENGINE parameter: * Name: AESDUKPTENGINE * Description: Change/select AES DUKPT PIN engine or slot (runtime parameter) * Value: 0 to 10 (Default 0) * Location: \[SPPM.config] of CAMCORE.INI New Z62 parameter: * Name: Z62\_PINTYPE * Description: Switch between AES DUKPT or IPP DUKPT pin type (runtime parameter) * Value: IPPD or IPPAES (Default IPPD) * Location: \[CPXPI.config] of CAMCORE.INI XGKS command will include AES DUKPT PIN key details as part of response. * QR Code Enhancement\ Provision to display QR Code along with the encoded QR code text in readable format on the application controlled IDLE screen (see Appendix R of EPP spec). * Bluetooth pairing simplification\ Support for Bluetooth pairing from application by executing certain triggers (see Appendix R of EPP spec). * Battery Percentage / Status Reporting\ Battery status (percentage & charging state) reporting for mobile/battery devices (e280/e285/e235) via S95 command. * RSA Encryption Support\ Added RSA encryptions (PKI/PKE/TRA). As part of this, E08 and E12 command support removed; these commands will now result in failure responses. * Password-less navigation to mac desktop from IDLE on E280\ App-controlled IDLE screen can navigate to mac desktop without a password on long press in the middle of the screen. Enable TERMPW = -1 in SAUIPARAMS.INI. #### Fixed Issues * ANC-38029 — Fix for repeating random sequence generation for card data on app restart/device reboot. * ANC-39111 — Generic XPI configuration changed to enable displaying communication icons (ethernet/wifi) when respective communication is enabled. * ANC-39424 — Align behavior of track data obfuscation in Engage XPI to match MX9: when track-2 is ISO and track-1 non-ISO, use S1 obfuscation for non-whitelisted BINs; if PAN is whitelisted, use N1 scheme. #### Limitations / Known Issues * Voltage encryption is not supported on this release. * WIC is not tested in this release. * SFL download failing for ADK bundle (ANC-39695). * Re-pairing behavior with iPad may require "Forget Device" — tracked in ESAMDOCS-48469. *** ### XPI 19.05.16.01 / XPI 20.05.16.01 #### Build Summary | **Release Date** | March 14 2024 | | ------------------------------- | -------------------------------------------------------------------------------------------------------- | | **Applications** | 19.05.16.01-1618, 20.05.16.01-1618 | | **OS Versions** | 32410200 (VOS2) | | **SDK Versions** | 32410200 (VOS2) | | **ADK Versions** | 4.10.0-1747 | | **VCL Version** | 12.7.1 | | **VHQ Agent** | 5.1.3.0-778 | | **Android Version** | N/A | | **COMM Types** | Ethernet, WIFI, USB, Serial | | **NAFG Lib** | 5.1.0-0 (VOS2) | | **Encryption** | VSP, ADE | | **EMV CT Kernels** | ...same CT kernel table... | | **EMV CTLS Kernels** | ...same CTLS kernel tables... | | **APM Versions** | N/A | | **Documents** | | | **EMV Desired Package Version** | ...same EMV desired package versions... | | **Collis** | btt-561-update-20231031 | | ![](/files/845411ae4e4f5066f261d7c5802bb8edc34e4327)**NOTE** | The CTLS kernel versions in Engage terminals may vary depending on the terminal type. This should be checked and modified (if needed) before providing to the customer as per the certification level. The certified applications can stay on their respective CTLS versions unless there is a reason for moving to a newer version. | | ------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | #### What’s New? Modified Files * CAMCORE Binaries * Forms Processor Binaries * XPI configuration Enhancements * N/A #### Fixed Issues * N/A #### Limitations / Known Issues * Voltage encryption is not supported on this release. * RSA (PKI/PKE/TRA) encryption is not supported on this release. * XDLD command fails intermittently. | ![](/files/845411ae4e4f5066f261d7c5802bb8edc34e4327)**NOTE** | The CTLS kernel versions in Engage terminals may vary depending on the terminal type. This should be checked and modified (if needed) before providing to the customer as per the certification level. The certified applications can stay on their respective CTLS versions unless there is a reason for moving to a newer version. | | ------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | *** ### XPI 19.05.15.00 / XPI 20.05.15.00 #### Build Summary | **Release Date** | June 01 2023 | | ------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Applications** | 19.05.15.00-1292, 20.05.15.00-1292 | | **OS Versions** | 32160203 (VOS2) | | **SDK Versions** | 32160203 (VOS2) | | **ADK Versions** | 4.9.1-RC1-1596 | | **VCL Version** | 12.2.0 | | **VHQ Agent** | 3.4.2.0-749 | | **Android Version** | N/A | | **COMM Types** | Ethernet, WIFI, USB, Serial | | **NAFG Lib** | 5.0.0-4 (VOS2) | | **Encryption** | VSP, RSA (PKI, PKE, TRA), Voltage, ADE, ACI | | **EMV CT Kernels** | ...same CT kernel table... | | **EMV CTLS Kernels** | ...V4.5 kernel table... | | **APM Versions** | N/A | | **Documents** | | | **EMV Desired Package Version** | jH6giSlTKnll | | XPI 19.XX | 1.5.0 | | XPI 20.XX | 2.5.0 | | **Collis** | btt-561-update-20221109 | | ![](/files/845411ae4e4f5066f261d7c5802bb8edc34e4327)**NOTE** | The CTLS kernel versions in Engage terminals may vary depending on the terminal type. This should be checked and modified (if needed) before providing to the customer as per the certification level. The certified applications can stay on their respective CTLS versions unless there is a reason for moving to a newer version. | | ------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | #### What’s New? Modified Files * CAMCORE Binaries * Forms Processor Binaries * XPI configuration Enhancements * SEC2 Migration — XPI migrated to ADK-SEC2.x module from ADK-SEC1.x. * Separate WIC binary and production key packages — WIC binary packages separated from WIC Prod keys package. #### Fixed Issues * ANC-29497 — Added length check for 9FA031 in F30 request processing/parsing to avoid invalid command responses. #### Known Issues * N/A *** (Company branding images and base64-embedded notes remain as included in original document.) Verifone North America Development\ The Royal Center Four\ 11700 Great Oaks Way, Suite 210\ Alpharetta, GA 30022 [www.verifone.com](http://www.verifone.com) --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.verifone.com/xpi/tbd-documentation/engage-release-notes/xpi_release-notes_xx.05.20.00.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.