---
title: "Retrieve latest public key"
method: GET
path: "/v1/cards/pin_keys/latest"
tags: ["Encrypted PIN Change"]
---

# Retrieve latest public key

`GET /v1/cards/pin_keys/latest`

Returns the latest Solaris public RSA key in JWK format. Call this method every time before you call the `POST Change card PIN` method to ensure you have the latest key. See [RFC7517](https://www.rfc-editor.org/rfc/rfc7517.html) for more information on JWKs.

## Response `200`

The public key was fetched successfully.

- GetPinApiResponse
  - `kid` string, required — ID of the returned public key. Use this value for the `kid` attribute when encrypting the PIN in JWE format.
  - `kty` 'RSA', required — The key type parameter identifies the cryptographic algorithm family used with the key. Only `RSA` is supported.
  - `use` 'enc', required — Specifies the intended use of the key. Values defined by this specification are `sig` (signature) and `enc` (encryption). This property is case-sensitive.
  - `alg` 'RS256', required — Specifies the algorithm intended for use with the key. For this property, you should either use an algorithm registered in the [IANA JSON Web Signature and Encryption Algorithms registry](https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms) or a value that contains a collision-resistant name. This value is a case-sensitive ASCII string.
  - `n` string, required — Contains the modulus value for the RSA public key, represented as the Base64URL encoding of the value's big-endian representation.
  - `e` string, required — Contains the exponent value for the RSA public key, represented as the Base64URL encoding of the value's big-endian representation.

## Other responses

- `401` — Invalid/missing OAuth token.
- `403` — Unauthorized action.
- `404` — The card could not be found.
- `500` — Internal server error.

---

[API](https://skmtc.net/solarisgroup/apis/card-creation-servicing.md) · [All operations](https://skmtc.net/solarisgroup/apis/card-creation-servicing/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/solarisgroup/card-creation-servicing/revisions/a772504dcc9e/schema)