Apple Access or Apple Transit settings
A list of additional configuration settings for the config.txt file, which relate to extracting secure data from passes for Apple Access or Apple Transit.
Apple Access allows passes in Apple Wallet to act as electronic keys. This is distinct from Apple VAS passes, for different use cases, enforcing a higher level of security, although it is similar in many ways. The additional settings are AccessTCI which identifies you as a credential issuer in the Apple Access programme, and AccessAuthRequired to require positive iPhone or Watch authentication with every tap to share an Access pass.
Apple Transit operates in a similar way to Apple Access. It also relies on AccessTCI to identify you as a credential issuer in the programme, and the ECP2Mode=t setting, to ensure that the VTAP reader identifies itself as an Apple Transit reader in the ECP2 polling loop.
When Apple Access or Apple Transit is enabled the reader is in ECP2 mode, and will then read DESFire credentials stored in Apple Wallet. You can manage the reading of these credentials with settings in the section the section DESFire cards or tags or Apple Access credential settings.
Settings below: AccessTCI | AccessAuthRequired | ECP2Mode
Definition:
The TCI is an ID assigned by Apple Access credential issuer. When this setting is used, the VTAP reader will operate in ECP2 mode and enable DESFire credential reading.
Options:
3 byte hex value which allows a matching pass to be brought up by an Apple iPhone or Apple Watch. A reboot is required to bring a change to this setting into effect.
Default value: N/A
Example value: =203C20
Definition:
Requires authentication of an Access pass in Apple Wallet, overriding any Express mode setting that may be in place.
Options:
=1 to require authentication,
=0 authentication not required.
A reboot is required to bring a change to this setting into effect.
Default value: =0
Example value: =1
Definition:
Identify the ECP2 application type.
Options:
=t for Apple Transit
=a for Apple Access
Any other value, or omitting this setting, will also default to Apple Access behaviour.
Default value: =a
Example value: =t
