Issuing encrypted Mifare cards

Issuing encrypted Mifare cards

Use UKEY Config to securely issue Mifare cards — no desktop tools required.
Configure once, then issue new cards in seconds by simply presenting them to the reader.

Supported environment

Component

Version

Component

Version

U-Prox Desktop BLE v2

3.33+

UKEY Config app

1.7518+

Supported cards

Mifare Classic, Mifare Plus X (2K/4K), etc.

❶ Create or verify the Master card

The Master card protects access to reader configuration and card issuing.
It is required once per reader — after that, the reader will require it to change settings.

  1. Download and open UKEY Config on your phone: available for Android and iOS.

  2. Tap Search and connect to the reader.

  3. If the app asks for a Master card → it already exists → continue to Flow 2.

  4. If no Master card is configured:

    • Go to More → Change master card;

    • Follow the on-screen instructions and present the card to assign it as the Master card.

Дивитися недавні фото 4.jpeg

 

Дивитися недавні фото.jpeg

 

❷ Allow issuing to blank cards

Applicable when the cards are still in factory state — SL0.
This enables the reader to accept and initialize unencrypted Mifare cards.

  1. Connect to the reader (present the Master card if requested).

  2. Go to Settings → Access → Extended settings..

  3. Enable Allow Mifare Zero cards = Yes.

  4. Tap Apply to save settings.

Дивитися недавні фото 3.jpeg

 

Дивитися недавні фото 2.jpeg

 

❸ Configure issuing parameters

At this stage, the reader receives all issuing rules — security level, key, sector/block for data storage.

  1. With the Master card still on the reader, connect again.

  2. Go to Settings.

  3. Select one card type depending on the required security level:

    • Mifare Classic → SL1;

    • Mifare Plus → SL3.
      (only one mode should be active)

Security level can only be increased: SL0 → SL1 → SL3.
Downgrading the card security level is not possible later.

  1. Enter issuing parameters:

    • Security level → SL1 or SL3;

    • Key → based on selected security level:

      • SL1 (Mifare Classic) → 6 bytes HEX, example: A0A1A2A3A4A5;

      • SL3 (Mifare Plus AES) → 16 bytes HEX, example: A0A1A2A3A4A5A6A7A8A9AAABACADAEAF.

    • Use sectors / Use address;

    • Initial issuing code (optional);

  2. Tap Apply to save parameters to the reader.

Дивитися недавні фото копія.jpeg

 

Дивитися недавні фото.jpeg

 

❹ Issue cards

The reader writes the configured parameters to each new card.

  1. Go to More → Issue cards.

  2. Select mode:

    • Mifare Classic issue (SL1);

    • Mifare Plus issue (SL3).

  3. Remove the Master card from the reader.

  4. Present a new blank card.
    When the UID appears — the card has been issued.

  5. Present the next card — the issuing code will increment automatically.

To apply different keys to multiple sectors, repeat Flow 4: Issue cards for each sector.

IMG_3356.PNG

 

IMG_3359.PNG

 

❺ Verify the card

Confirmation that the card is issued correctly and can be read by the reader.

  1. Connect to the reader. The Master card is not required at this stage.

  2. Stay on the main screen of UKEY Config and do not change any settings.

  3. Present the issued card to the reader.

reader.png

Expected behavior:

  • The UID appears on screen.

  • The reader beeps once → card is readable and valid.

  • No beep → the card cannot be read (wrong key or security level mismatch).