HID 2300 Crescendo Devices Key User Guide

HID® Crescendo® Devices ”
Identity and Access Management Solutions
How to Order Guide
PLT-04939, Rev B.4
June 2023
Powering
Trusted Identities

2300 Crescendo Devices Key

Copyright
© 2020 – 2023 HID Global Corporation, part of ASSA ABLOY. All rights reserved.
This document may not be reproduced, disseminated, or republished in any form without the prior written permission of HID Global Corporation.

Trademarks
HID GLOBAL, HID, the HID Brick logo, the Chain Design, ActivID, ActivClient, Crescendo, iCLASS, iCLASS SE and Seos are trademarks or registered trademarks of HID Global, ASSA ABLOY AB, or its affiliate(s) in the US and other countries and may not be  used without permission. All other trademarks, service marks, and product or service names are trademarks or registered trademarks of their respective owners.
MIFARE, MIFARE Classic, MIFARE DESFire, MIFARE DESFire EV1, MIFARE PLUS and MIFARE Ultralight are registered trademarks of NXP B.V. and are used under license.

Contacts
For technical support, please visit: https://support.hidglobal.com.

What’s new

DESFire EV3, description of themain Logical access parameters and associated values  included in the  profile| B.4

A complete list of revisions is available in  Revision history.

Section 01 HID Crescendo Portfolio

HID® Crescendo® authenticators are the most secure credentials from HID Global that can be used to protect access to computers, networks and data and, optionally, also be used for secure access to physical spaces and facilities using state of the art access  control technologies.
The latest version of these credentials includes the HID Crescendo Key and HID Crescendo 2300 models and are recommended for all new deployments.
The previous generation of credentials is available to ensure continued operations for customers with existing installations or who require specific capabilities that are not yet available in the latest models.

| C r e s c e n d o
144K F I P S 1| Crescendo 2300
Contact a n d
C o n t a c t l e ss| Crescendo 2300
C o n t a c t l e ss
Only| C r e s c e n d o
2300 F I P S| Crescendo K e y| Crescendo K e y
F I P S
---|---|---|---|---|---|---
C o mmu n i c a t i o n s
USB| | | | | ●| ●
ISO 14443 Type A (NFC)| | ●| ●| | ●| ●
ISO7816| ●| ●| | ●| |
A pp l i c a t i o n s
PIV/PKI| ●| ●| ●| ●| ●| ●
FIDO| | ●| ●| | ●|
OATH| | | | | ●|
Physical A cc e ss
Seos| ●| ●| ●| | |
MIFARE| ●| ●| | | |
iCLASS| ●| | ●| | |
Prox| ●| ●| ●| ●| |
Security C e r t i f i c a t i o n
FIPS 140-2| ●| | | ●| | ●
Common Criteria| ●| ●| ●| ●| ●| ●

1.1 HID Crescendo Key
The HID Crescendo Key is a device available in USB Type A and USB Type C form factors, that delivers FIDO, PIV PKI, and OATH capabilities.
All models are ready-to-use FIDO USB and NFC Security Keys.

HID Crescendo Keys are available with the following configurations or profiles:

• Standalone Profile supporting a wide combination of capabilities:
  • FIDO, with any FIDO2-compliant browsers and applications
  • PIV/PKI initialized using a standalone installation of ActivID ActivClient® middleware or using the ActivID Credential Management solutions
  • OATH, managed by a standalone HID tool such as the HID Crescendo Management Tool, HID Crescendo Authenticator Tool or by leveraging the HID Crescendo API
• Secure Managed Profile requiring ActivID Credential Management solutions (HID WorkForceID™ Management) for management of PIV and OATH capabilities in a more secure way.
  It is suitable for larger deployments where a complete lifecycle management solution is required to synchronize data between a user directory, one or more certification authorities and the HID Crescendo devices assigned to users.

For more information, go to https://www.hidglobal.com/products/crescendo-key

1.2 HID Crescendo 2300

HID Crescendo 2300 are the latest generation of multi-application smart cards that combine logical and physical access in the same device.
They exist in hardware configurations compatible with different physical access control systems.

When placing an order for HID Crescendo 2300 smart card, a format must be specified for each of the included technologies.
For information about formats used in physical access technology, contact your HID PACS representative or your PACS reseller.
For more information, go to https://www.hidglobal.com/products/crescendo

1.3 HID Crescendo FIPS

For customers that have a strict requirement to show a current validation certificate, HID Crescendo FIPS are hybrid cards or USB Secure Key with a contact FIPS 140-2 certified module used for PKI operations and optional contactless technologies for physical access.
The HID Crescendo FIPS family also includes a dual interface card compliant with FIPS 201 for issuance of US Government Personal Identity Verification PIV smart cards.

Section 02 Ordering Details

The sections below specify the part numbers and, if available, the programming and marking options that need to be specified when placing an order.
In addition to standard part numbers that are typically in stock, it is possible to define and order custom part numbers that are built-to-order and that can include custom graphics or initialization profiles.

2.1 Overview
2.1.1 Ordering USB Key Form Factors
When you send your order for devices to HID Global, the part number includes already all the details related to the graphical and programming information.

Part Number of the USB Key:
BKAxx or BKNxxx or BKSxx

Note: The quantity corresponds to SKU count. In the case of HID Crescendo Key, you order boxes of 100 units, so one unit is one box.

2.1.2 Ordering Smart Card Form Factors
When you send your order for devices to HID Global, you must specify the part number and required programming information for the different technologies as specified in Programming column of the tables that follow for each product family.

Part Number of the smart card:
40xxxxxx| Programming information for Logical Access:
CRExxxx| Programming information for Physical Access:
Hxxxx
---|---|---

Guidelines:

• If there are graphical customization options, add them as described in Customization Options, with the same quantity as the number of credentials.
• The quantity corresponds to SKU count, in the case of smart card one unit is one card, and the minimum order quantity is 100.
• If the order includes a Corporate 1000 format, remember to add part number MC-1000 Corp 1000 Management Fee with the same quantity as the number of credentials.
• If you request an Elite Key, add the MC-0036 Elite Key Management Fee.

2.2 HID Crescendo Key Series

2.2.1 Part Numbers

2.3 HID Crescendo 2300
The following diagram explains the codification of the smart card based on the part number, programming information and customization options.

• YYYYYYYYYYY-YY represents the Sales Order Number.
• A blank card is delivered with the marking positioned in top right-hand corner on the back of the card.
• The printed card number, sales order reference and additional programming designators are placed in the bottom right-hand corner on the back of the card.
• Cards ordered with plain white front and back packaging, with no HID artwork or with custom artwork, will still have a small “HID logo” and reference number printed in the lower left-hand corner.

2.3.1 Profile Definitions
The following tables described the core profiles that determine the enabled features and options associated to the logical access part of the product.

R e f e r e n c e| D e s c r i p t i o n| P K I C e r t i f i c a t e s| F I D O R e s i d e n t K e y| PIN S e tt i n g s
---|---|---|---|---
A l p h a n um e r i c| S h a r e d| D e f a ul t v a lu e| Change o n first u s e| M i n i mum d i g i t s| M a x i mum d i g i t s| M a x i mum t r i e s| M a x i mum unlock t r i e s
C R E 00000000| Secure Managed  profile| Personalization is defined and injected with ActivID CMS
C R E 10006868| Standalone profile  PKI/FIDO| 5| 5| | | 000000| | 6| 8| 6| 8
C R E 10204868| Standalone profile  PKI/FIDO| 5| 5| ●| | 000000| | 4| 8| 6| 8
C R E 40204868| Standalone profile  Full PKI| 9| 0| ●| | 000000| | 4| 8| 6| 8

Where:

• Shared – allows sharing the same PIN with the different applications (FIDO and PKI/OATH)
• Change on first use – require the end user to change the PIN on the first use of the product
• Maximum tries – number of wrong PINs allowed before the card is locked
• Maximum unlock tries – number of attempts to unlock the device after it is locked

2.3.2 Codification and Part Numbers

Part Number| Technology| Description| Required Programming Information
---|---|---|---
402300x| Contact andContactless| Crescendo 2300| Contact: format
402301x| Contact and Contactless| Crescendo 2300, Prox| Contact: format
Proximity: format, CN, FC
402340x| Contact and Contactless| Crescendo 2300, MIFARE Classic 4K| Contact: format
MIFARE Classic:  format, CN, FC
402341x| Contact and Contactless| Crescendo 2300, MIFARE Classic 4K, PROX| Contact: format
MIFARE Classic:  format, CN, FC
Proximity: format, CN, FC
402360x| Contact and Contactless| Crescendo 2300, DESFire EV1 8K| Contact: format
DESFire: format, CN, FC – or INIT
402361x| Contact and Contactless| Crescendo 2300, DESFire EV1 8K, Prox| Contact: format
DESFire: format, CN, FC – or INIT
Proximity: format, CN, FC
402380x| Contact and Contactless| Crescendo 2300, Seos 8K| Contact: format
Seos: format, CN, FC
402381x| Contact and Contactless| Crescendo 2300, Seos 8K, Prox| Contact: format
Seos: format, CN, FC
Proximity: format, CN, FC
402300Fx| Contact and Contactless| Crescendo 2300 FIPS| Contact: format
402301Fx| Contact and Contactless| Crescendo 2300 FIPS, Prox| Contact: format
Proximity: format, CN, FC
402220x| Contactless| Crescendo 2300 CL iCLASS SR| Crescendo: format
iCLASS: format, CN, FC
402221x| Contactless| Crescendo 2300 CL iCLASS SR, Prox| Crescendo: format
iCLASS: format, CN, FC
Proximity: format, CN, FC
4022821x| Contactless| Crescendo 2300 CL iCLASS SR, SEOS, Prox| Crescendo: format
iCLASS: format, CN, FC
Seos: format, CN, FC
Proximity: format, CN, FC

Where:

• x can be B(Blank) or (M)Magstripe or (C)Custom
• INIT = PACS technology not initialized

2.3.3 Programming Information

Crescendo
Format| Determines enabled features and options. The most common values are:
• CRE10204868 – the standalone format for cards to be used out of the box
• CRE00000000 – the managed format to be used in combination with ActivID CMS (onpremise)| CRE00000000 –
Secure Managed Profile
CRE10204868 –
Standalone profile
with PKI and FIDO features
CRE40204868 –
Standalone full PKI
profile (no FIDO)
Elite key| Optional end customer specific reference used to protect the card manager|
Seos
Format| Determines the structure of PAC bits| H10302 – HID 37 Bits
Card number (CN)| Initial card number in the order|
Facility code (FC)| Optional additional field, in some formats can be a site or company code|
Elite key| Optional end customer specific reference used to protect  Seos vault access|
DESFire
Format| Determines the structure of PAC bits, in MIFARE technologies it can be an HID format or be
left as INIT for blank unprogrammed cards| H10302 – HID 37  Bits
Card number (CN| Initial card number in the order|
Facility code (FC)| Optional additional field, in some formats can be a site or company code|
Elite key| Optional end customer specific reference used to protect Seos vault access|
Prox
Format| Determines the structure of PAC bits| H10302 – HID 37 Bits
Card number (CN| Initial card number in the order|
Facility code (FC)| Optional additional field, in some formats can be a site or company code|
iCLASS
Format| Determines the structure of PAC bits| H10302 – HID 37 Bits
Card number (CN)| Initial card number in the order|
Facility code (FC)| Optional additional field, in some formats can be a site or company code|
Elite key| Optional end customer specific reference used to restrict  iCLASS memory access|

2.4 HID Crescendo 144K FIPS
2.4.1 Part Numbers

iCLASS: format, CN, FC
40040x-D14| Crescendo 144K FIPS MIFARE Classic 4K| Contact: format
MIFARE: format, CN, FC
40070x-D14| Crescendo 144K FIPS MIFARE DESFire EV3 8K| Contact: format
MIFARE: format, CN, FC
40080x-D14| Crescendo 144K FIPS Seos 8K| Contact: format
Seos: format, CN, FC
40021x-D14| Crescendo 144K FIPS iCLASS 32K Prox| Contact: format
iCLASS: format, CN, FC
Proximity: format, CN, FC
40041x-D14| Crescendo 144K FIPS MIFARE Classic 4K Prox| Contact: format
MIFARE: format, CN, FC
Proximity: format, CN, FC
40071x-D14| Crescendo 144K FIPS MIFARE DESFire EV3 8K Prox| Contact: format
MIFARE: format, CN, FC
Proximity: format, CN, FC
40081x-D14| Crescendo 144K FIPS Seos 8K Prox| Contact: format
Seos: format, CN, FC
Proximity: format, CN, FC
400821x-D14| Crescendo 144K FIPS Seos 8K iCLASS 32K Prox| Contact: format
Seos: format, CN, FC
iCLASS: format, CN, FC
Proximity: format, CN, FC

Where:

• x can be B(Blank) or (M)Magstripe or (C)Custom

2.4.2 Programming Information

Contact
Format| Determines enabled features and options with only two possible values:
• STANDALONE for cards managed with ActivClient
• NO-PROFILE for cards managed by ActivID CMS on-premise| STANDALONE –
STANDARD
NO-PROFILE – CMS
Elite key| Optional end customer-specific reference used to protect the card manager|
Seos
Format| Determines the structure of PAC bits| H10302 – HID 37 Bits
Card number (CN)| Initial card number in the order|
Facility Code (FC)| Optional additional field, in some formats can be a site or company code
Elite key| Optional end customer-specific reference used to protect Seos SIO
iCLASS
Format| Determines the structure of PAC bits| H10302 – HID 37 Bits
Card number (CN)| Initial card number in the order|
Facility Code (FC)| Optional additional field, in some formats can be a site or company code|
Elite key| Optional end customer-specific reference used to restrict iCLASS memory access|
MIFARE
Format| Determines the structure of PAC bits, can be NONE if MIFARE is not to be programmed| H10302 – HID 37 Bits
Card number (CN)| Initial card number in the order, when a format is specified
Facility Code (FC)| Optional additional field, in some formats can be a site or company code|
Prox
Format| Determines the structure of PAC bits| H10302 – HID 37 Bits
Card number (CN)| Initial card number in the order|
Facility Code (FC)| Optional additional field, in some formats can be a site or company code|

2.5 Ordering Form
This form can be used as a template for placing an order.
After selecting the required configuration, save or print the form as a PDF. Then attach it to your order sent to HID Global.
Note: To complete the form manually, select the blank options in the drop-down lists before printing.

HID Crescendo Key or HID Crescendo 2300
Select the required part number and description and enter the quantity.

Programming Details
For Smart Card Form Factors Only
Select the required programming features corresponding to the type of smart card selected above.

Section 03 Customization Options

3.1 Options for USB Key Form Factors

3.1.1 Customization Process Flow

3.1.2 Graphic Requirements – HID Global recommendations?

• No fancy effect (shadow, fading, 50% black…), only plain pantone colors for casing and overlay
• No metallic color
• The logo should have a minimum height of 3 mm
• Characters should have a minimum height of 1.5 mm

3.1.3 What is the basic information required before starting any proof validation?

• Pantone colors (drawing, text, …)
• Font (Arial, …)
• Font size
• Position of the logo on the windows glass (correctly adjusted, centered…)

3.1.4 Artwork file – Document format?

• All files sent to HID Global should be in Adobe® Illustrator® version CS6 or earlier

3.2 Options for Smart Card Form Factors
HID Global offers a wealth of options to make secure and personalized credentials. For further information, contact your HID Global Account Manager.

3.2.1 Artwork
A custom artwork can be printed directly during the lamination process of the card and can include security features such as holograms that cannot be reproduced.

3.2.2 Part Numbers

Revision history

DESFire EV3, description of
the main Logical access parameters and associated values  included in the profile| B.4
Feb-22| Updates for HID Crescendo 2300 w/MIFARE Classic| B.3
Nov-21| Updates for HID Crescendo C1100 EOL| B.2
Sep-21| Updates for HID Crescendo 2300 FIPS and iCLASS| B.1
Dec-20| Updates for HID Crescendo 2300 DESFire| B.0
Jul-20| Updates for HID Crescendo 2300 and Key| A.0

hidglobal.com

For technical support, please visit: https://support.hidglobal.com
© 2020 – 2023 HID Global Corporation, part of ASSA ABLOY
All rights reserved.
PLT-04939, Rev B.4

References

• Need Support? | Support
• Need Support? | Support
• HID® Crescendo® Smart Card Series | HID Global
• HID® Crescendo® Key™ Series | HID Global

Read User Manual Online (PDF format)

Download This Manual (PDF format)

Download this manual  >>