Siemens SIMATIC Ident Function Manual page 66

Examples/applications
6.2 Processing of data memories/transponders
RF300: Address mapping of OTP memory on the ISO transponders
For the OTP area, a 16-byte address space is always reserved at the end of the memory
area. The subdivision of the blocks depends on the chip type. The corresponding addresses
for the user data are therefore not available to the application when the OTP area is used.
The last 16 bytes of the MDS address can be used as an OTP data area:
MDS D1xx
Start Length Start
address address
(hex) (hex)
0060 1...16 00F0
0064 1...12 00F4
0068 1...8 00F8
006C 1...4 00FC
NOTICE
Write access to addresses starting at FF80 to FF8F activates the write protection (OTP
function) on the EEPROM user memory. This operation is not reversible.
Note
With the RF2xx readers and MOBY D, the OTP memory remains readable. Writing via the
address FF80, on the other hand, is not possible.
66
R/W EEPROM
MDS D2xx MDS D3xx
Length Start
address
(hex)
1...16 03D0
1...12 03D4
1...8 03D8
1...4 03DC
MDS D4xx
Length Start Length
address
(hex)
1...16 07C0 1...16
1...12 07C4 1...12
1...8 07C8 1...8
1...4 07CC 1...4
Function Manual, 07/2012, J31069-D0166-U001-A4-7618
Write
ISO OTP once
Start Length
address
(hex)
FF80 4, 8,
12, 16
FF84 4, 8, 12 -
FF88 4, 8
FF8C 4
FB 45 for MOBY U, MOBY D, RF200, RF300
Length
with
MDS D4x
x
8, 16
8
-