u/Fragrant-Tea4673

MIFARE Plus EV2 – Custom ATS Historical Bytes not applied after SL3

Hi everyone,

Working on MIFARE Plus EV2 personalization.

I need to set custom Historical Bytes (5 bytes)

in the ATS.

My SL0 sequence :

  1. WritePerso block 0x9000 (custom PICC config)

  2. SetConfiguration 0x5C (custom ATS)

  3. Power cycle

  4. CommitPerso → SL3

Problem : After SL3, ATQA/SAK/ATS still show

factory default values. Custom bytes not applied.

Questions :

- Exact data format for block 0x9000 on EV2 ?

- Does 0x5C require AES auth first on EV2 ?

- Power cycle before or after SetConfiguration ?

Using Proxmark3 RRG. Thanks!

reddit.com
u/Fragrant-Tea4673 — 2 days ago