FAQs during UL's webinar on Change Notification Submission
April 19, 2017 - UL recently hosted a webinar on the recent changes on MasterCard's Change Notification Submission. We received quite a few questions on this topic, which we have listed and answered for you.
Q1: Is there any documentation to explain how to complete the CNS Form? We have a large team and we would like to be able to provide training on how to complete the CNS Form.
There is no such document available yet, however, our team in UL will be happy to help you with such a request. Please contact your sales representative in your region for more details.
Q2: What is a neutral result (for the CNS)? Does that mean no approval? And will a CNS with a neutral response be charged as a full, completed CNS?
A neutral result means that the changes you specified in the CNS Form are not considered to be minor and the chip product cannot be issued as such. In this case you will have to either submit a new CNS request with different changes or apply for a full CPV.
In case of a neutral result UL will clearly inform you whether a new CNS request is possible or a full CPV is needed for your changes. Note that the CNS with neutral result will indeed be invoiced fully, however, you might be eligible for a discount on the CPV project initiated. Please check our order form for the details or request your sales representative for more information.
Q3: If the profile of the Reference CPV is based on a Standard Profile (defined by Mastercard), can we apply for changes that lead to a non-Standard Profile or another Standard Profile via a CNS?
If the changes are compliant with the Personalization Data Specifications of Mastercard and are considered minor, then a CNS can be initiated. This could mean that the new profile will no longer be a Standard Profile, but still meets Mastercard requirements.
Q4: If we have already changed the card profile with a previous CNS, and now we would like to make additional changes to this new profile, what do we mention as Reference CPV in the CNS Form? Will that be the service tracking number of the initial CNS or of the original full CPV?
The Reference CPV project can be a full CPV only.
Please mention the original Reference CPV project in CNS Form and add all the changes you would like to make to this profile, including the changes made in your previous CNS.
Q5: Is adding/removing Tags allowed with CNS?
It is not allowed to add or remove Tags, because it significantly changes your card profile.
There is one exception: tags can be added/removed if they are included in the Tag “BF0C” of the response to a Select ADF APDU command. CNS Form Data Package 6 shows the tags allowed for such changes.
Q6: It is possible to raise one CNS which allows to change into multiple different country/currency codes at the same time? Can these be combined with other changes?
With the new CNS Form it is possible to combine a change into multiple countries/currencies indeed. When applying other additional changes, please make sure that these changes are minor and apply to all profiles (all countries/currencies). In case you want to apply different additional changes per country/currency, a separate CNS Form should be submitted. Each CNS Form will be handled (and charged) separately.
Note that you can use one UL order form to initiate multiple CNSs.
Q7: Can you explain the Letter of Guarantee? When is it required, who needs to write the letter?
The Letter of Guarantee is required when the card profile of one issuer is going to be used by another issuer, in other words, the issuer is being changed. Such letter needs to be signed by a common third parties, which can be one of the following:
- Personalization bureau: This personalization bureau is personalizing card products for both the issuer that received approval via CPV (reference CPV) and the issuer who wishes to reuse the same profile.
- Principle member: When one of the affiliate members of the principle member is reusing the profile that was approved for another affiliate member of the same principle member.
- Trusted Service Manager (TSM): similar to abovementioned, but for Mobile projects.
Q8: Is it allowed to apply for a CNS if the personalization bureau changes?
A CNS is not allowed to change the personalization bureau since we cannot assure that the personalization is done under the same conditions as the Reference CPV, namely, if the personalization settings are identical and personalization process is the same.
Q9: Is a CNS sufficient to change the chip of the original CPV?
A change of chip is indeed one of the valid reasons to apply for CNS. Please note that a CNS is possible only if the new chip is equivalent to the chip for which the original CPV was approved. In this case next to the CNS Form you will need to provide a Letter of Equivalence signed by your chip vendor. UL can provide you with the template of such letter.
Q10: Can you confirm that the Letter of Equivalence is only needed if we move to a new chip? If we are making other changes to the profile and the chip remains the same, would we not need it?
Yes, indeed. Letter of Equivalence is required only when the chip product is changed and not needed otherwise.
Q11: Can a combination of different changes be applied in one CNS, e.g. change of chip, issuer and personalization settings?
It is possible to combine several changes in one CNS. The CPV Service Provider will assess all changes and inform you if the combination can be registered as minor change and is accepted.
Q12: If we want to add CDA support to our profile, would a CNS be sufficient? And if so, which tags must be changed when adding CDA support?
A CNS process is possible if both of the following conditions are met:
- The current card profile is approved for DDA support, which means that the Reference CPV is approved for DDA support, and
- Signed static data of the current card profile already includes CDOL1 and CDOL2. You can check this by verifying if the CDOL1 and CDOL2 tags are included in the SFI Record to be authenticated.
If one or both of these conditions are not met, a full CPV is required.
In order to add CDA, the following tag values need to be changed: Tag 82 (Application Interchange Profile), Tag 9F0D (IAC Default), Tag 9F0F (IAC Online).
Q13: Is there any other document we can use apart from Mastercard’s CPV Manual to define which changes are “too big” before initiating a CNS with a Service Provider?
In addition to the CPV Manual you may check the latest versions of M/Chip Requirements and M/Chip Personalization Data Specifications documents.
Q14: Do we always have to specify the ‘Business changes behind the changes for CNS’ in the CNS Form?
Yes, this is one of the fields in the CNS Form that Mastercard requires you to complete in the CNS Form.
Q15: Is it possible to initiate a CNS with UL even though the Reference CPV was done with another CPV Service Provider?
This is indeed possible. In that case you have to submit the original CPV Report (signed by Mastercard) upon initiation of the CNS.
Q16: Does UL provide CNS service for CPA based chips?
For a CNS based on CPA based chips, please contact your Mastercard representative.
Q17: CNS: is there an equivalent of the CNS process of the other schemes?
We as Mastercard CPV Service Provider are not aware of such processes. It might be the case that the VSDC Personalization Assistant includes the simplified procedure for updates on already approved products. We advise you to contact these schemes directly if you have a similar situation.
We encourage you to contact our sales representative if you wish to receive support from UL with this request.
Q18: What is the link to Mastercard scoping tool?
The link to the Mastercard scoping tool is as follows:
Q19: Will the slide deck used during UL’s CNS webinar be provided?
Webinar slides will not be shared but the recording of the webinar is available at below.
Q20: Where can I find more information on the certification process of both CPV and CNS?
Please contact firstname.lastname@example.org. You will be provided with the complete information.