Gemalto SafeNet IDPrime 940B

SafeNet IDPrime smart cards are designed for PKI-based applications, and come with a SafeNet minidriver that offers perfect integration with native support for Microsoft® environments (through Windows 11), without any additional middleware.

In addition to its seamless integration into Windows ecosystems, the SafeNet IDPrime 940B are contact interface smart cards and are compatible with any environment through support by the SafeNet Authentication Client.

SafeNet IDPrime cards are multi-application smart cards, meaning they can have optional onboard applets for various functions. An MPCOS applet can be added to provide both e-purse and data management services.

Category: Tags: , , ,



  • SafeNet IDPrime 940B is based on a 500KB Flash memory chip. It comes as standard with 20 key containers. The memory available for certificates and other applets and data in this standard configuration is at least 73 KB.



  • BaseCSP minidriver (SafeNet minidriver)
  • Global Platform 2.2.1
  • Java Card 3.0.4
  • ISO 7816


Operating systems

  • Windows, MAC, Linux


Cryptographic algorithms

  • Hash: SHA-1, SHA-256, SHA-384, SHA-512.
  • RSA: up to RSA 4096 bits
  • P-256 bits ECDSA, ECDH. P-384 & P-521bits ECDSA, ECDH are available via a custom configuration
  • On-card asymmetric key pair generation (RSA up to 4096 bits & Elliptic curves up to 521 bits)
  • Symmetric: AES—For secure messaging and 3DES for Microsoft Challenge/Response only


Communication protocols

  • T=0, T=1, PPS, with baud rate up to 446 Kbps at at 3.57 MZ (TA1=97h)


Other features

  • Onboard PIN Policy
  • Multi-PIN support
  • SafeNet IDPrime family of cards can be customized (card body and programming) to fit customers’ needs.



  • Embedded crypto engine for symmetric and asymmetric cryptography



  • Minimum 500,000 write/erase cycles
  • Data retention for minimum 25 years



  • CC EAL6+



  • SafeNet IDPrime smart cards include multiple hardware and software countermeasures against various attacks: side channel attacks, invasive attacks, advanced fault attacks and other types of attacks.
  • SafeNet IDPrime 940B is CC EAL5+ / PP Java Card certified for the Java platform and CC EAL5+ / PP QSCD certified for the combination of Java platform plus PKI applet, is eIDAS qualified for both eSignature and eSeal.