Actually, our TKE is not showing CMACZERO key check value when we do AES key entry.  The version is 10.0.  I see in the documentation that there is some ACP in the TKEUSER role to generate the CMACZERO verification pattern.  

We have to check if the ACP is active in the smart card profile.

Is there something else to do to have the CMACZERO KCV ? 

TKE has CMAC support when displaying the content of the MKs.