Electrical Personalization

Electrical Personalization -- Writing Data to the Chip

Electrical personalizationElectrical personalizationPersonalizationWriting data to card chip at issuance.Click to view → (often called "electrical perso") is the process of writing cardholder-specific data, cryptographic keys, certificates, and application parameters to a smart card's EEPROM or flash memory during card issuance. This step transforms a generic, pre-personalized card into a unique credential tied to a specific individual, account, or device.

Data Written During Personalization

For an EMV payment card, electrical personalization loads the primary account number (PAN), expiration date, cardholder name, issuer public keys, card-specific RSA or ECC key pairs for offline data authentication (SDA/DDA/CDA), PIN verification data, and risk management parameters such as cumulative transaction limits. For SIM cards, the process writes the IMSI, authentication key (Ki), and operator-specific applets. Government eID cards receive biometric templates, X.509 certificates, and PACE domain parameters.

Security Requirements

The personalization process handles highly sensitive cryptographic material and must operate under strict security controls. Master keys are stored in HSMs, and per-card keys are generated through key diversification algorithms. The communication channel between the personalization machine and the card typically uses SCP03 secure messagingsecure messagingProtocolCryptographic protection of APDUAPDUProtocolCommunication unit between card and reader.Click to view → command/response pairs.Click to view → to protect data in transit. Card personalization bureaus performing this work are certified under schemes such as GSMA SAS, PCI DSS, or Common Criteria.

Production Workflow

In a typical production line, cards arrive pre-personalized with transport keys and serial numbers from the chip manufacturer. The personalization machine reads the card serial number, looks up the corresponding data record from the issuers data preparation system, establishes a secure channel, and writes all card-specific data. Throughput rates range from 500 to 3,000 cards per hour depending on the amount of data and the cryptographic operations required. After electrical perso, cards proceed to graphical personalization for visual element printing.