<html> <head> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> </head> <body text="#000000" bgcolor="#FFFFFF"> Hi Neill, I'm not sure what could have gone wrong. And again, I'm really not an expert in this area. Our smart card guy has been out sick. And apparently I'm not doing a good job playing him ;-). Could you provide your esc version? Our latest f22 esc is here: <a class="moz-txt-link-freetext" href="http://koji.fedoraproject.org/koji/buildinfo?buildID=672713">http://koji.fedoraproject.org/koji/buildinfo?buildID=672713</a> One thing you could try is to see if esc is even trying to read the card (debugging I learned from our guy). You can rerun the pcscd like the following: export COOL_KEY_LOG_FILE=/tmp/coolkey.debug (this can be anything value, I don't think it actually writes to it) killall pcscd /usr/sbin/pcscd -f -d -a (this will produce a lot of debugging on terminal) restart esc on another terminal (make sure you put in the phone home url; sometimes that pops up behind the ESC) and observe if the debug terminal indicates any recognition of card read. For example, on my system, when I remove my card, i can see EHStatusHandlerThread() Card Removed From OMNIKEY AG CardMan 3121 00 00 when I reinsert it, I see EHStatusHandlerThread() Card inserted into OMNIKEY AG CardMan 3121 00 00 Let us know how it goes. Christina <div class="moz-cite-prefix">On 01/27/2016 09:55 AM, Thornton, Neill R. CIV wrote: </div> <blockquote cite="mid:b0a396050d3948cfbe92644818c7100f@MERC-EX-MB10.tah-19.mercy.navy.mil" type="cite"> <pre wrap="">Christina, Thanks... I went into Info.plist and changed the ifdDriverOptions to each of the following: - 0x0010 - 0x0020 - 0x0001 - 0x0002 Restarting escd and pcsc each time. After each change I verified that pcsc_scan was still showing the card inserted, no issues there. Just won't show up in the ESC. Thanks again, Neill -----Original Message----- From: <a class="moz-txt-link-abbreviated" href="mailto:pki-users-bounces@redhat.com">pki-users-bounces@redhat.com</a> [<a class="moz-txt-link-freetext" href="mailto:pki-users-bounces@redhat.com">mailto:pki-users-bounces@redhat.com</a>] On Behalf Of Christina Fu Sent: Wednesday, January 27, 2016 9:45 AM To: <a class="moz-txt-link-abbreviated" href="mailto:pki-users@redhat.com">pki-users@redhat.com</a> Subject: [Non-DoD Source] Re: [Pki-users] Fedora 22 - ESC Error oops, some correction... On 01/27/2016 09:40 AM, Christina Fu wrote: </pre> <blockquote type="cite"> <pre wrap="">Hi Neil, </pre> </blockquote> <pre wrap="">I meant Neill...sorry </pre> <blockquote type="cite"> <pre wrap=""> I am no expert, but I do know for different cards you need to diddle with the ifdDriverOptions value in /usr/lib64/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist By default, I think it's <string>0x0000</string> My guess is that you could change it to <string>0x0010</string> restart the escd </pre> </blockquote> <pre wrap="">actually, restart pcscd too. </pre> <blockquote type="cite"> <pre wrap=""> if that doesn't work, change it to <string>0x0020</string> etc. Hope this helps, and please let us know how it works out for you (which value it works for the card). Christina On 01/26/2016 05:49 PM, Thornton, Neill R. CIV wrote: </pre> <blockquote type="cite"> <pre wrap="">All, I am hoping someone can help me out with a green field Dogtag install. We have installed all of the correct subsystems, and wanted to try and provision a hardware smart card. We are using Axalto Cyberflex 64k cards for testing. This is on Fedora 22, both the Dogtag server and the enrollment workstation have been updated using dnf to the latest packages. pcsc_scan on the enrollment station reports the following: PC/SC device scanner V 1.4.23 (c) 2001-2011, Ludovic Rousseau <a class="moz-txt-link-rfc2396E" href="mailto:ludovic.rousseau@free.fr"><ludovic.rousseau@free.fr></a> Compiled with PC/SC lite version: 1.8.13 Using reader plug'n play mechanism Scanning present readers... 0: SCM Microsystems Inc. SCR 355 [CCID Interface] 00 00 Tue Jan 26 17:42:20 2016 Reader 0: SCM Microsystems Inc. SCR 355 [CCID Interface] 00 00 Card state: Card inserted, Shared Mode, ATR: 3B 95 95 40 FF AE 01 03 00 00 defined(@array) is deprecated at /usr/lib64/perl5/vendor_perl/Chipcard/PCSC.pm l ine 69. (Maybe you should just omit the defined()?) ATR: 3B 95 95 40 FF AE 01 03 00 00 + TS = 3B --> Direct Convention + T0 = 95, Y(1): 1001, K: 5 (historical bytes) TA(1) = 95 --> Fi=512, Di=16, 32 cycles/ETU 125000 bits/s at 4 MHz, fMax for Fi = 5 MHz => 156250 bits/s TD(1) = 40 --> Y(i+1) = 0100, Protocol T = 0 ----- TC(2) = FF --> Work waiting time: 960 x 255 x (Fi/F) + Historical bytes: AE 01 03 00 00 Category indicator byte: AE (proprietary format) Possibly identified card (using /usr/share/pcsc/smartcard_list.txt): 3B 95 95 40 FF AE 01 03 00 00 Axalto - Cyberflex 64K Gemalto TOP IM FIPS CY2 (product code HWP115291A) -- However, when we start esc, either as root or as a user, the GUI will start and display no smart cards. When the "Diagnostics" button is pressed, an error dialog appears saying "coolkey.GetAvailableCoolKeys() failed! Undefined(undefined)". After pressing OK, the diagnostic window displays, confirming 0 smart cards are detected. System versions are listed as: Smart Card Manager Version: null System Versions: Mozilla/5.0 (x11; linux x86_64; rv:38.0) gecko/20100101 esc/1.1.0-24 Any insight to our problem would be greatly appreciated! Thanks, Neill -- Neill Thornton Chief Information Officer - Medical Treatment Facility USNS Mercy 619-235-3857 - Desk 619-206-5426 - Cell <a class="moz-txt-link-abbreviated" href="mailto:neill.thornton@mercy.navy.mil">neill.thornton@mercy.navy.mil</a> / <a class="moz-txt-link-abbreviated" href="mailto:neill.thornton@mercy.navy.smil.mil">neill.thornton@mercy.navy.smil.mil</a> _______________________________________________ Pki-users mailing list <a class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a> </pre> </blockquote> <pre wrap=""> _______________________________________________ Pki-users mailing list <a class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a> </pre> </blockquote> <pre wrap=""> _______________________________________________ Pki-users mailing list <a class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a> </pre> </blockquote> </body> </html>