GlobalPlatform Status Words
Status words returned by GlobalPlatform 2.3.1 card-management commands (INSTALL, LOAD, DELETE, GET STATUS, GET DATA). Drawn from GPC §11.
| SW1 SW2 | Meaning | Class | Detail |
|---|---|---|---|
| 9000 # | Success (GP) | Success | Command processed normally. |
| 6200 # | Logical channel already closed | Warning | |
| 6283 # | Card Life Cycle State is CARD_LOCKED | Warning | |
| 6300 # | Authentication of host cryptogram failed | Auth | |
| 6581 # | Memory failure | Error | |
| 6700 # | Wrong length in Lc | Error | |
| 6881 # | Logical channel not supported or active | Error | |
| 6882 # | Secure messaging not supported | Error | |
| 6982 # | Security status not satisfied | Auth | Auth required first or insufficient. |
| 6985 # | Conditions of use not satisfied | Error | |
| 6A80 # | Wrong data / incorrect values in command data | Error | |
| 6A81 # | Function not supported / card life-cycle is CARD_LOCKED or APPLICATION_LOCKED | Error | |
| 6A82 # | Application not found / referenced object not found | Error | |
| 6A84 # | Not enough memory space | Error | |
| 6A86 # | Incorrect P1 P2 | Error | |
| 6A88 # | Referenced data not found | Error | |
| 6D00 # | Invalid INS | Error | |
| 6E00 # | Invalid CLA | Error | |
| 9484 # | Algorithm not supported | GP | GP key-handling specific. |
| 9485 # | Invalid key check value | GP | GP key-handling specific. |
What this reference covers
Spec
GlobalPlatform Card Specification 2.3.1 §11.
Companion tool
Reading
Primary sources
GlobalPlatform Card Specification 2.3.1 · ISO/IEC 7816-4:2020
What this reference does not cover
The status words here are those returned by GlobalPlatform card-management commands. They are not application status words: once your applet is selected and running, the codes it returns are defined by that applet's own specification, not by GlobalPlatform. If a value is missing from this table, check whether the command was actually addressed to a security domain rather than to an application.
Version matters too. This tracks GlobalPlatform 2.3.1; earlier cards may return values since redefined, and vendor security domains routinely add proprietary codes outside the specified ranges. Treat an unrecognised value as vendor-specific and consult the card documentation rather than assuming a generic meaning.
Frequently asked questions
What does GlobalPlatform define?
Card content management: how applications are loaded, installed, made selectable and deleted, and the security domains and secure channel protocols that authorise those operations.
Which commands do these status words cover?
The card-management set — INSTALL, LOAD, DELETE and GET STATUS — as used against a security domain.
Why does a management command return 6982?
Security status not satisfied: no authenticated secure channel, or a security domain without the privilege for the operation.
What does 6A88 mean?
Referenced data not found — typically an AID that is not present on the card, which usually means a load order problem rather than a malformed command.
What is the Issuer Security Domain?
The on-card representation of the card issuer, holding the keys and privileges that authorise content management.