[Pki-users] ESC Format / Enroll Error

Jack Magne jmagne at redhat.com
Tue Dec 23 19:37:49 UTC 2008


You are having a problem creating a secure channel. Perhaps posting a 
snippet of the log might help.



Adewumi, Julius-p99373 wrote:
> You might want to play with changing "false" to "true in the CS.cfg for
> op.enroll.userKey.update.applet.emptyToken.enable=false or the 
> op.format... equivalent , etc.
>
> /From: Julius Adewumi/
> /@GDC4S.com/
> /Ph:480-441-6768/
> /Contract Corp:MTSI/
>
>
> ------------------------------------------------------------------------
> *From:* pki-users-bounces at redhat.com 
> [mailto:pki-users-bounces at redhat.com] *On Behalf Of *Zach Casper
> *Sent:* Tuesday, December 23, 2008 12:00 PM
> *To:* pki-users at redhat.com
> *Subject:* RE: [Pki-users] ESC Format / Enroll Error
>
> Tps-debug log shows the following:
>
> RA_Format_Processor::Process – applet upgrade failed
>
> Tps-error log show the following:
>
> RA_Processor::SetupSecureChannel – Failed to create a secure channel 
> 0- potentially due to an RA/TKS key mismatch or differing RA/TKS key 
> versions.
>
> RA_Processor::UpgradeApplet -0 channel create failure
>
> And a series of Bad Response when trying to SelectApplet or GetStatus
>
> zach
>
> _____________________________________________
> *From:* Jack Magne [mailto:jmagne at redhat.com]
> *Sent:* Tuesday, December 23, 2008 1:10 PM
> *To:* Zach Casper
> *Subject:* Re: [Pki-users] ESC Format / Enroll Error
>
> The first step would be to take a look at the tps log or smart card 
> server.
>
> These can be found at:
>
> /var/lib/pki-tps/logs/tps-debug.log
>
> Search the bottom of the log for error 19 and it should give you an idea
>
> of what TPS was trying to do at the time.
>
> Zach Casper wrote:
>
> >
>
> > We have an Infineon Smart Card and currently we are unable to
>
> > Format/Enroll due to the following ESC Error
>
> >
>
> > “Formatting of smart card failed. Error: The Smart Card Server cannot
>
> > upgrade the software on your smart card.”
>
> >
>
> > And Diagnostics show this error:
>
> >
>
> > “Attempting to Format Key, ID: ####### - Key Format failure, Error: 19.”
>
> >
>
> > This card comes up as “Formatted” because we’ve manually installed a
>
> > version of the Dogtag applet prior to using ESC & Dogtag.
>
> >
>
> > Any advice on how we can troubleshoot?
>
> >
>
> > --
>
> >
>
> > Zach Casper
>
> >
>
> > Envieta LLC
>
> >
>
> > ----------------------------------------
>
> >
>
> > ------------------------------------------------------------------------
>
> >
>
> > _______________________________________________
>
> > Pki-users mailing list
>
> > Pki-users at redhat.com
>
> > https://www.redhat.com/mailman/listinfo/pki-users
>
> >
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3237 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/pki-users/attachments/20081223/549e3744/attachment.bin>


More information about the Pki-users mailing list