# Release Notes April 2023
source: https://developer.mastercard.com/mdes-customer-service/documentation/release-history/pre-release-april2023/index.md

## Release Change Summary {#release-change-summary}

MDES now supports the multiple Virtual Card Number (VCN) use case, where each device can have multiple tokens and each token has a VCN associated with it. For this, the MDES Customer Service API will now return Multiple Virtual Card Number (VCNs) data, associated to a token for a given device and a Real Card Number (RCN). To support this change, the Search API response has been updated as follows:

1. The Search API response will be enhanced to provide VCN data at the Token object level.

## Dates for Introduction of Functionality {#dates-for-introduction-of-functionality}

* MTF - 29 March 2023
* Production - 3 April 2023

## Change 1 - Returning VCN data in the Token Object {#change-1---returning-vcn-data-in-the-token-object}

The VCN data will now be available in the Token object.

API Reference: `GET /{id}/search`

## Impact {#impact}

This change only affects the issuers onboarded to the InControl for Mobile Payments (ICMP) Program.

For all new and existng implementations, the Search API response will only return the Virtual Card Number parameters under the token object, if the token is mapped to the given Virtual Card Number.
Follow the requirements described in the Open API YAML specification to implement this new functionality.

Sufficient testing should be performed in order to prepare issuing systems to process the request and the new response data.

### Sandbox Validation {#sandbox-validation}

For testing in Sandbox:

* Use static keys for payload encryption.
* Download the [public-key-certificate.crt](https://static.developer.mastercard.com/content/mdes-customer-service/uploads/public-key-certificate.crt) file. The public key contained in this certificate is used to wrap the one-time use AES key in requests to MDES.
* Use the fingerprint value: **243e6992ea467f1cbb9973facfcc3bf17b5cd007** for input field `encryptedPayload.publicKeyFingerprint` when testing in the Sandbox environment.
* Invoke the Search API Request (encrypted) with the Real Card Number (RCN/FPAN) or PaymentAppInstance Id

### Personal data \& Privacy Note {#personal-data--privacy-note}

Issuers are reminded that the information presented via the MDES Customer Service API includes personal data which is subject to data privacy laws. Issuers must satisfy themselves that the processing of such personal data is compliant with applicable privacy laws.