The private key of the attestation certificate (S) is currently loaded using the vendor command.
However, in field deployment (e.g. Fidesmo), regular communication channels with the card are not encrypted like the installation session is (via Global Platform).
The private key of the attestation certificate (S) is currently loaded using the vendor command.
However, in field deployment (e.g. Fidesmo), regular communication channels with the card are not encrypted like the installation session is (via Global Platform).