Hi,
I have a new (empty) SLIX2 tag, accessed using a FEIG reader ISC.LRM1002 with IsoStart 11.01
I can query and issue generic commands alright (like write and read blocks, select, get random number, get information, ...) but I am unable to set a write password successfully.
I have tried the following (and variations of it, like changing byte order)
1- Send 0xB2 Get Random Number
>> 02 00 0A FF B1 04 B2 02 3D 9F
<< 02 00 0A 00 B1 00 D3 39 DB FA OK
2-The random number is X = D3 39
3-Compute pwd' = pwd xor (X ++ X)
pwd' = D3 39 D3 39
3.1- I have tried 00 00 00 00, FF FF FF FF, 0F 0F 0F 0F as initial password
4-Send 0xB3 Set password (0x02=write password) --> Failure
>> 02 00 0F FF B1 04 B3 02 02 D3 39 D3 39 1E 68
<< 02 00 09 00 B1 95 0F DC 5A Reader: ISO-Error
"Statusbyte 0x95 iso-error 0x0F"
5-I can't continue with the next step, I assume 0xB4 write password to change the default password to the desired one. Then the tag gets blocked and must be removed from the RF field to reset it.
Can someone see clearly what I am doing wrong exactly? From the other queries and answers I
think that I am following the correct path, but I do not know why is it always failing.
Thank you very much.
Documentation:
https://www.nxp.com/docs/en/data-sheet/SL2S2602.pdf
(I have read similar question here like : https://community.nxp.com/t5/NFC/ICODE-SLIX-SL2S2602-SET-PASSWORD-FAIL/td-p/854659 )
