# MIFARE Plus SE Cards — AES-128 Classic Upgrade Path

URL: https://proudtek.com/products/rfid-cards/mifare-plus-se-card/
Source URL: https://proudtek.com/products/rfid-cards/mifare-plus-se-card/
Generated: 2026-03-16T01:42:30.697Z
Kind: product
Publisher: Proud Tek Co., Limited
Author: Proud Tek Co., Limited
Credentials: ISO 9001:2015, ISO 14001:2015, RoHS Compliant, CE Marking, REACH Compliant
Image: https://proudtek.com/landing-images/mifare-plus-se-card.png
Image Alt: MIFARE Plus SE contactless smart card used for phased AES-128 security migration from MIFARE Classic 1K

## Description
The entry-tier AES smart-card chip is NXP's drop-in AES-128 security upgrade for MIFARE Classic 1K installations. It runs in MIFARE Classic emulation...

## Procurement Snapshot
- Best fit: MIFARE Plus SE Cards — AES-128 Classic Upgrade Path is suitable for RFID or NFC identification, access, and OEM customization projects.
- Key options: Form Factor: Card format compatible with common access-control, ID, or NFC workflows.
- Customization: Confirm artwork, encoding, material, chip, and finish requirements before quoting.
- Quote checklist: Reference MIFARE Plus SE Cards — AES-128 Classic Upgrade Path in your inquiry so the matching product page stays attached to the quote. Card format compatible with common access-control, ID, or NFC workflows. Share target chip or...

## Key Specs
- Form Factor: Card format compatible with common access-control, ID, or NFC workflows.

## FAQ
- Q: What is the difference between MIFARE Plus SE and MIFARE DESFire EV3?
  A: Plus SE is a drop-in Classic replacement. It keeps Classic's 16-sector memory layout and can operate on existing Classic readers in Security Level 1, then switches to AES-128 at Security Level 3 once readers are firmware-upgraded. DESFire EV3 is a new architecture. An AES-128 file system with up to 28 firewalled applications, ISO/IEC 7816-4 APDU commands and Common Criteria EAL5+ certification. Choose Plus SE when you have a large installed Classic reader base and need phased migration. Choose DESFire EV3 for new installations or when you need multi-application architecture and EAL5+ assurance.
- Q: Do our existing Classic readers need hardware changes for Plus SE?
  A: For Plus SE in Security Level 1 (Classic-compatible mode), no reader change is needed — Plus SE cards are recognised as Classic cards. To enable Plus SE Security Level 3 (AES-128), your readers need a firmware update that understands the Plus SE AES command set. Most readers manufactured after 2012 from HID, SALTO, dormakaba and ASSA ABLOY support this firmware upgrade; confirm with the reader vendor against your exact reader part number and firmware version.
- Q: Can we mix Classic 1K and Plus SE cards on the same reader estate during migration?
  A: Yes — that is the point of the Plus SE phased model. During migration, Classic 1K cards continue to work on all readers, Plus SE cards in Security Level 1 also work on all readers, and once individual readers are firmware-upgraded they accept Plus SE at Security Level 3. No user experiences an access gap and no dual-credential parallel estate is needed.
- Q: What is the difference between Plus SE, Plus S and Plus X?
  A: All three are in the MIFARE Plus family and support the Security Level ladder. Plus SE is the entry-point Standard Edition, with the Classic-compatible 1 KB layout and the four-level security model. Plus S adds a proximity check (distance-bounding protocol) to defend against relay attacks. Plus X adds SL2 command multiplexing and can run DES / 3DES / AES on a mixed reader estate. For most Classic migrations, Plus SE is the right answer; specify Plus S when relay attacks are in the threat model and Plus X only for specific legacy reader mixes.
- Q: Once a card is switched to Security Level 3, can it be reverted to Security Level 1?
  A: No. The Security Level transition is one-way (SL0 → SL1 → SL3). Once a Plus SE card is committed to Security Level 3, it cannot be downgraded. This is intentional — it prevents an attacker from coercing the card back into CRYPTO-1 mode. Plan the level switch for the reader-upgrade cycle, not earlier.
- Q: What is the MOQ and lead time for MIFARE Plus SE cards?
  A: Blank white Plus SE cards: 200-piece minimum, lead time 5–7 business days from stock. Custom 4-colour printed Plus SE cards with overlay lamination and sector-key encoding: 500-piece minimum, 12–15 business days from artwork approval. Every order ships with migration planning documentation and sector-key configuration templates so the issuing team can line up the encoding workflow with the reader-upgrade plan.
- Q: Does Plus SE support NFC tap-to-URL on a smartphone?
  A: No — Plus SE's memory layout is Classic-style sectors, not NDEF. iPhones and Android phones will read the UID but not the sector content without specific SDK code. For smartphone tap-to-URL workflows (marketing, authentication, DPP) pair Plus SE with an NTAG 424 DNA or DESFire EV3 SKU — both are NFC Forum Type 4 tags and open URLs natively. (For low-cost tap-to-URL without authentication, NTAG 213 / 215 / 216 are NFC Forum Type 2 tags that also work.)

## Machine Routes
- JSON: https://proudtek.com/machine/products/rfid-cards/mifare-plus-se-card.json
- Text: https://proudtek.com/machine/products/rfid-cards/mifare-plus-se-card.txt