UICC Toolkit Application Instantiation failing with 6A80 error

[jelson-tech94]

I have a very simple applet built with UICC Toolkit (TS 102 241). I can load the package properly on my card, but i cannot install the instance of the applet. It always fail with 6A80 error.

Below is my Install4Install command and the applet code just in case anyone here can help me.

Install 4 Install Command:

80 E6 0C 00 5B

08 A000000559101001 -- Package AID
0B A000000559101001112233 -- Applet AID
10 A00000055910100111223301D0000101 -- Instance AID

03 000000 --Privileges

2F 
	C9 01 00 -- Application Specific Parameters
	EF 00 
	EA 28 -- UICC Toolkit Application Specific Parameters
		80 0A 03001001000000000000
		81 18 0001000010A0000000871002FFFFFFFF8907090000010000
	82 00
00

Applet Code:

/** 
 * Copyright (c) 1998, 2024, Oracle and/or its affiliates. All rights reserved.
 * 
 */

package com.multiimsi.simple;

import javacard.framework.*;
import uicc.toolkit.*;
import uicc.access.*;
import uicc.system.*;

public class MultiIMSIsimple extends Applet implements ToolkitInterface, ToolkitConstants {
	private static final short FID_DF_USIM  = (short)0x7FFF; 
	private static final short FID_EF_IMSI  = (short)0x6F07;
	private static final byte DEV_ID_ME = (byte)0x82;
	private static final short FID_DF_MF  = (short)0x3F00;
	private static final byte[] IMSI_A = {(byte)0x08, (byte)0x26, (byte)0x18, (byte)0x10, (byte)0x00, (byte)0x00, (byte)0x00, (byte)0x01, (byte)0xF1};
    private static final byte[] IMSI_B = {(byte)0x08, (byte)0x26, (byte)0x12, (byte)0x34, (byte)0x56, (byte)0x78, (byte)0x90, (byte)0x12, (byte)0xF1};

    private FileView simFileView;
    private byte[] tempBuffer;

    private MultiIMSIsimple() {
    	
        ToolkitRegistry reg = ToolkitRegistrySystem.getEntry();
        reg.setEvent(EVENT_EVENT_DOWNLOAD_LOCATION_STATUS);
        simFileView = UICCSystem.getTheUICCView(JCSystem.CLEAR_ON_RESET);
        tempBuffer = new byte[10];
    }

    /**
     * Installs this applet.
     * 
     * @param bArray
     *            the array containing installation parameters
     * @param bOffset
     *            the starting offset in bArray
     * @param bLength
     *            the length in bytes of the parameter data in bArray
     */
    public static void install(byte[] bArray, short bOffset, byte bLength) {
    	try {
    		// Checkpoint 1
            ISOException.throwIt((short) 0x6F01); // chegou aqui
            
            MultiIMSIsimple applet = new MultiIMSIsimple();
            
            ISOException.throwIt((short) 0x6F02); // chegou aqui
            
    		new MultiIMSIsimple().register();
    		
    		// Checkpoint 2
            ISOException.throwIt((short) 0x6F03); // chegou aqui
    		
    	} catch (Exception e) {
            // Captura silenciosa de qualquer erro
            ISOException.throwIt((short) 0x6F42); // ou outro código para depuração
        }
    }

    public void process(APDU apdu) {
        if (selectingApplet()) return;
    }

    public void processToolkit(short event) {
        if (event == EVENT_EVENT_DOWNLOAD_LOCATION_STATUS) {
            EnvelopeHandler env = EnvelopeHandlerSystem.getTheHandler();
            short mccMncOffset = env.findTLV(TAG_LOCATION_INFORMATION, (byte)0x01);
            if (mccMncOffset == TLV_NOT_FOUND) return;

            //short valueOffset = env.getValueOffset();
            byte mccDigit1 = env.getValueByte((short)(mccMncOffset));
            byte mccDigit2 = env.getValueByte((short)(mccMncOffset + 1));
            byte mccDigit3 = env.getValueByte((short)(mccMncOffset + 2));
            byte mncDigit1 = env.getValueByte((short)(mccMncOffset + 3));
            byte mncDigit2 = env.getValueByte((short)(mccMncOffset + 4));
            byte mncDigit3 = env.getValueByte((short)(mccMncOffset + 5));

            // Comparar com MCC = 268 e MNC = 01
            boolean is26801 = (mccDigit1 == '2' && mccDigit2 == '6' && mccDigit3 == '8' &&
                               mncDigit1 == '0' && mncDigit2 == '1');

            try {
                simFileView.select(FID_DF_MF);
                simFileView.select(FID_DF_USIM);
                simFileView.select(FID_EF_IMSI);

                byte[] imsiToWrite = is26801 ? IMSI_A : IMSI_B;
                simFileView.updateBinary((short)0, imsiToWrite, (short)0, (short)imsiToWrite.length);

                // Trigger refresh (simple refresh for EF IMSI)
                ProactiveHandler proHdlr = ProactiveHandlerSystem.getTheHandler();
                proHdlr.init(PRO_CMD_REFRESH, (byte)0x00, DEV_ID_ME);
                proHdlr.appendTLV(TAG_FILE_LIST, new byte[]{(byte)0x6F, (byte)0x07}, (short)0, (short)2);
                proHdlr.send();

            } catch (Exception e) {
                // Opcional: tratamento de erro (por ex., log, fallback, etc.)
            }
        }  
    }
}

I have tried changing the parameters with multiple combination with no success, including minimal and basic parameters installation. Also, by adding some error handling to the applet code, I could understand that the failure happens before the install method is called.

[jelson-tech94]

Note, i am using sysmoISIM-SJA5

[jelson-tech94]

Update, the applet will install normally if i remove the setEvent, apparently, the installation is failing on this specific line.

[martinpaljak]

Converted to discussion. This has not been written out explicitly (will add to FAQ, there have been similar issues opened before), but you need to know the necessary parameters for installation, that are crucial for SIM applications (but not part of global platform specs, which GPPro is about). There has been issues where the ordering of parameters has caused trouble, but those should be fixed. From GPPro perspective you just need to specify the right extra installation parameters (same applies for any system parameters like contactless extension etc)

[jdabbs003]

How are you sending the 0xEA tag? Is this a parameter sent along with -install or a separate command? (I'm not familiar with GP).

If it's possible that something else is contributing a default 0xCA tag to your init params, it'll throw that error. Also if the 0xEA isn't actually making it into the card your code can throw that error. Also I notice you're not setting an MSL -- but I don't know if that matters.