Re: help with piv card

On Wed, 2020-03-25 at 19:53 -0400, Ray Lambert wrote:
> Hi,
> 
> I'm trying to get a new PIV card to work and hoping someone can help.
> 
> The old card was working perfectly for some time with openconnect
> vpn, pcsc, 
> and p11-kit on Manjaro (fully updated).
> 
> The new card is recognized and the ATR is accessible but the card is
> not 
> otherwise visible (no tokens).
> 
> I recently installed opensc to try to get it work but the results are
> the 
> same.  I was advised (on the OC mailing list) that a different
> pkcs#11 driver 
> may be needed.
> 
> The card type (according to ActivClient on Windows) is "ID-One Cosmo
> v8.0 
> 128K with PIV 2.3.5" (Oberthur).
> 
> opensc results are:
> 
> ####
> 
> $ opensc-tool -l
> # Detected readers (pcsc)
> Nr.  Card  Features  Name
> 0    Yes             Broadcom Corp 5880 [Contacted SmartCard] 
> (0123456789ABCD) 00 00
> 
> $ opensc-tool -a
> 
> Using reader with a card: Broadcom Corp 5880 [Contacted SmartCard] 
> (0123456789ABCD) 00 00
> 3b:d6:97:00:81:b1:fe:45:1f:07:80:31:c1:52:11:18:f9
> 
> $ opensc-tool -n
> Using reader with a card: Broadcom Corp 5880 [Contacted SmartCard] 
> (0123456789ABCD) 00 00
> Failed to connect to card: Unresponsive card (correctly inserted?)

We would probably have to see debug log from OpenSC, but unresponsive
card errors sound like issue of the reader or reader driver in pcsc, if
I remember well.

Regards,
-- 
Jakub Jelen
Senior Software Engineer
Security Technologies
Red Hat, Inc.