OTAMan SIM OTA with a Human Face v2.2.11

●

github help

Format

Commands

Expanded format

APDU hex

SD params tag

Connection parameters ('84')

Security parameters ('85')

PSK Identity (text)

KVN

KID

Retry policy ('86')

Retry counter (B0,00=unlimited)

Hours

Minutes

Seconds

Report failure (vendor-specific TLV)

HTTP POST ('89', 8A=host,8B=agent,8C=URI)

Host (text→hex)

HTTP agent ID (text, X-Admin-From)

URI (text→hex)

Wrapped in Command Scripting template ('AA')

Command

Context

Response data (hex)

Card presets

SPI1 (Security Parameter Indicator)

SPI2 (PoR settings)

KIc (Ciphering Key Identifier)

KID (MAC Key Identifier)

KIc Key (hex)

KID Key (hex)

TAR (3 bytes)

Counter (5 bytes)

Padding byte

APDU (hex)

RAM operations perform atomic GlobalPlatform commands over SCP80. Card keys are taken from the saved preset.

Card preset

Operation

CAP file (max 48 kB)

SD AID (empty = ISD)

Privileges

Byte 1

Byte 2

Security Domain Trusted Path DAP Verification Authorized Management Delegated Management Token Verification Card Lock Global Delete Card Terminate Global Lock Card Reset Global Registry CVM Management Mandated DAP Verification Final Application

Receipt Generation

SIM/UICC Toolkit parameters

Toolkit mode

Priority

Timers (max)

Menu text length

Menu items

First menu position

First menu ID (hex)

Last menu position

Last menu ID (hex)

Channels (max)

MSL (SPI1, hex)

TAR (3 bytes)

Access domain (hex)

Max services

Install parameters (hex, optional) STK parameters (hex, optional) Make selectable LOAD block size (bytes, empty = auto-fit)

Splits the load file into LOAD APDUs that fit one SCP80 SMS; auto-fit picks the largest size that encodes into 140 octets.

Working...

Custom files are added in file manager tree and included in card scan.

Root (MF / ADF)

Parent DF

FID (4 hex)

Alias (EF. / DF.)

The parent may be any DF path — a standard DF from the tree or a custom DF, any depth; parents not yet seen in the tree are marked ⚠.

Only mismatches

Server URL

To access local card reader, you need pysim-otaman-server running locally.

To connect, install pysim-otaman-server: git clone https://github.com/anttro/otaman.git and start it.
Refer to pysim-otaman-server README files for details. Click Connect when pysim-otaman-server is ready

Sort: FID Name

| Raw Decoded

STK menu

No menu set by the card

STATUS and Polling

| Polling

TERMINAL PROFILE

Events that the card monitors (SET UP EVENT LIST):

Fetched proactive commands:

PROVIDE LOCAL INFORMATION response data

HTTP OTA listener

Mode

Host

Port

Script

PSK keys come from the card presets (Cards tab): the listener picks the key by the identity the card sends in the TLS handshake.

Pass-through: every BIP channel the card opens is connected to this Host:Port (the external HTTP OTA platform); TLS is terminated there, the card's requested address is only logged.

Script results (R-APDUs)

HTTP OTA log

New script from

Scripts are stored locally in your browser and sent to the server when a listener starts.

CAP file

SD AID (empty = ISD)

Install parameters (hex, optional)

STK parameters (hex, optional)

Make selectable

The .cap is only used to generate the APDUs: the script stores the APDU list, not the file.

AIDs to delete (one per line)

Delete parameters (P2)

APDUs (one hex C-APDU per line)

Name	Kind	APDUs	Created

Card presets are stored locally in your browser. JSON export/import buttons are below the card list.

SCP81 HTTP OTA: the listener picks the key by the PSK identity the card sends in the TLS handshake. Cards without a PSK are ignored by the listener.

Name	ICCID	KIc	KID	SPI1	SPI2	TAR	Cntr	SCP81

TERMINAL PROFILE

Preset (device model)

Profile (hex)

Bits are decoded per TS 102 223 5.2; the hex field is authoritative and bytes/bits outside the table are preserved as-is.

Profile from card

Profile name

Ignore contents of files: All

FCP/FCI check

Select card snapshot

Compare snapshots

Master snapshot Snapshot to check