[Pki-users] ESC Format / Enroll Error

Tue Dec 23 19:09:00 UTC 2008

You might want to play with changing "false" to "true in the CS.cfg for 
op.enroll.userKey.update.applet.emptyToken.enable=false  or the
op.format...   equivalent , etc.

From: Julius Adewumi 
@GDC4S.com 
Ph:480-441-6768 
Contract Corp:MTSI 

________________________________

From: pki-users-bounces at redhat.com [mailto:pki-users-bounces at redhat.com]
On Behalf Of Zach Casper
Sent: Tuesday, December 23, 2008 12:00 PM
To: pki-users at redhat.com
Subject: RE: [Pki-users] ESC Format / Enroll Error

Tps-debug log shows the following:

RA_Format_Processor::Process - applet upgrade failed

Tps-error log show the following: 

RA_Processor::SetupSecureChannel - Failed to create a secure channel 0-
potentially due to an RA/TKS key mismatch or differing RA/TKS key
versions.

RA_Processor::UpgradeApplet -0 channel create failure

And a series of Bad Response when trying to SelectApplet or GetStatus

zach

_____________________________________________
From: Jack Magne [mailto:jmagne at redhat.com]
Sent: Tuesday, December 23, 2008 1:10 PM
To: Zach Casper
Subject: Re: [Pki-users] ESC Format / Enroll Error

The first step would be to take a look at the tps log or smart card
server.

These can be found at:

/var/lib/pki-tps/logs/tps-debug.log

Search the bottom of the log for error 19 and it should give you an idea

of what TPS was trying to do at the time.

Zach Casper wrote:

>

> We have an Infineon Smart Card and currently we are unable to 

> Format/Enroll due to the following ESC Error

>

> "Formatting of smart card failed. Error: The Smart Card Server cannot 

> upgrade the software on your smart card."

>

> And Diagnostics show this error:

>

> "Attempting to Format Key, ID: ####### - Key Format failure, Error:
19."

>

> This card comes up as "Formatted" because we've manually installed a 

> version of the Dogtag applet prior to using ESC & Dogtag.

>

> Any advice on how we can troubleshoot?

>

> --

>

> Zach Casper

>

> Envieta LLC

>

> ----------------------------------------

>

>
------------------------------------------------------------------------

>

> _______________________________________________

> Pki-users mailing list

> Pki-users at redhat.com

> https://www.redhat.com/mailman/listinfo/pki-users

>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20081223/224068c8/attachment.htm>