How do I create a security domain and install applet in the security domain?

[Abbott]

Could anyone tell me how to create a security domain and install applet in it?

[horse dream]

For these questions, you can find all the answers in GP 2.1.1 spec.

1. Create a security domain

1) Select ISD AID： A0 00 00 00 03 00 00 00 //
Please see GP 2.1.1 charpter 9.9 for more details.
2) Init-update and External-Authenticate //
Please see GP 2.1.1 charpter E.5 for more details.
3) Send Install commands for Install and makeselectable //
Please seeGP211 charpter 9.5.

2. Install applet in the security domain

1) Select ISD or SSD (the SSD which is for install applet must have permission of Delegated Management)
2) Init-update and External-Authenticate
3) Send Install command for Install and makeselectable.

[UNKNwYSHSA]

When you install a SSD instance, the

the AID for the installable Security
Domain Executable Load File (package) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50' and
the Executable Module AID (applet) within the GlobalPlatform Registry is 'A0 00 00 01 51 53 50 41'.

This is in the specification: "Mapping Guidelines of Existing GP v2.1.1 Implementation on v2.2.1"