Vieri
2014-03-20 14:05:32 UTC
Hi,
I'm having trouble accessing a smartcard (authentic driver - Cherry MY 8040 USB multiboard keyboard & reader).
pcsc_scan seems to see and identify the card correctly.
However,
I haven't tried anything else in Linux (like use the certificate within
the card to sign something or access a web site, etc.). In fact,
all I really want is to "redirect" the smartcard data to a Windows 2003 Terminal Server.
I use the following command from a Linux client:
rdesktop -r scard rdpserver
I even tried to set the device names accordingly:
rdesktop -r scard:"Cherry GmbH SmartTerminal XX44 00 00"="Cherry GmbH SmartTerminal XX44 0" -f "$RDP_SERVER"
I
can see that the reader is detected in Windows Terminal Server and that
it detects the events of inserting and removing a card.
However,
when connecting with a Windows client, a user certificate is
automatically installed in several apps (IE, etc.) whereas it's not if I
connect with a Linux rdesktop client.
I compared the 2 logs I
get in the Windows 2003 Terminal Server (PC/SC diagnostics tool) when
connecting with a Windows client and a Linux rdesktop client.
Basically,
when connected from Linux I get "Clock rate" and "BWT" errors. When
connected from Windows Clock rate=4MHz and BWT=1439.48 work etu
(actually these 2 values may vary if I connect from other Windows
clients).
Here are the details (when connected with a Linux client):
Cherry GmbH SmartTerminal XX44 00 00:
Attribute |Value
--------------------------------+----------------------------------------------
ATR |3b fb 18 00 00 81 31 fe 45 00 31 c0 64 77 e9 10 00 01 90 00 62
Clock rate (MHz) |Error
Convention |direct
Protocol |T=1
(TA1) Divider F |372
(TA1) Transfer factor D |12
(TB1) VPP supply |unnecessary
(TC1) Extra guardtime N |0 work etu
(TC2) Work waiting time |115200 work etu
(TA3) IFSC (byte) |254
(TB3) CWT |43 work etu
(TB3) BWT |Error
Historical Characters (text) | 1Àdwé
Historical Characters (hex) |00 31 c0 64 77 e9 10 00 01 90 00
I posted more debug information on the following forum:
http://forums.gentoo.org/viewtopic-t-986680.html
Below I'm specifying the support data asked for at http://pcsclite.alioth.debian.org/ccid.html#support:
Versions
CCID driver version: 1.4.15
pcsc-lite version: 1.8.11
smart card reader name: Cherry GmbH SmartTerminal XX44
the output of the command "/usr/sbin/pcscd --version": pcsc-lite version 1.8.11.
Copyright (C) 1999-2002 by David Corcoran <***@musclecard.com>.
Copyright (C) 2001-2011 by Ludovic Rousseau <***@free.fr>.
Copyright (C) 2003-2004 by Damien Sauveron <***@labri.fr>.
Report bugs to <***@lists.musclecard.com>.
Enabled
features: Linux i486-pc-linux-gnu serial usb libudev
usbdropdir=/usr/lib/readers/usb ipcdir=/run/pcscd
configdir=/etc/reader.conf.d
Platform
Operating
system or GNU/Linux distribution name and version: Linux
3.10.32-std402-i586 #2 SMP Mon Feb 24 21:56:40 UTC 2014 i686 Intel(R)
Atom(TM) CPU N450 @ 1.66GHz GenuineIntel GNU/Linux
(custom system rescue CD based on Gentoo)
Smart card middleware name and version: unknown/unused
Reader manufacturer name and reader model name: Cherry MY 8040 USB (multiboard)
Smart card name: unknown
Log
Attached log.txt (recorded while rdesktop connects to the Windows
Terminal Server and the user removes and reinserts again the smartcard
into the keyboard slot)
Any ideas?
Thanks,
Vieri
I'm having trouble accessing a smartcard (authentic driver - Cherry MY 8040 USB multiboard keyboard & reader).
pcsc_scan seems to see and identify the card correctly.
However,
I haven't tried anything else in Linux (like use the certificate within
the card to sign something or access a web site, etc.). In fact,
all I really want is to "redirect" the smartcard data to a Windows 2003 Terminal Server.
I use the following command from a Linux client:
rdesktop -r scard rdpserver
I even tried to set the device names accordingly:
rdesktop -r scard:"Cherry GmbH SmartTerminal XX44 00 00"="Cherry GmbH SmartTerminal XX44 0" -f "$RDP_SERVER"
I
can see that the reader is detected in Windows Terminal Server and that
it detects the events of inserting and removing a card.
However,
when connecting with a Windows client, a user certificate is
automatically installed in several apps (IE, etc.) whereas it's not if I
connect with a Linux rdesktop client.
I compared the 2 logs I
get in the Windows 2003 Terminal Server (PC/SC diagnostics tool) when
connecting with a Windows client and a Linux rdesktop client.
Basically,
when connected from Linux I get "Clock rate" and "BWT" errors. When
connected from Windows Clock rate=4MHz and BWT=1439.48 work etu
(actually these 2 values may vary if I connect from other Windows
clients).
Here are the details (when connected with a Linux client):
Cherry GmbH SmartTerminal XX44 00 00:
Attribute |Value
--------------------------------+----------------------------------------------
ATR |3b fb 18 00 00 81 31 fe 45 00 31 c0 64 77 e9 10 00 01 90 00 62
Clock rate (MHz) |Error
Convention |direct
Protocol |T=1
(TA1) Divider F |372
(TA1) Transfer factor D |12
(TB1) VPP supply |unnecessary
(TC1) Extra guardtime N |0 work etu
(TC2) Work waiting time |115200 work etu
(TA3) IFSC (byte) |254
(TB3) CWT |43 work etu
(TB3) BWT |Error
Historical Characters (text) | 1Àdwé
Historical Characters (hex) |00 31 c0 64 77 e9 10 00 01 90 00
I posted more debug information on the following forum:
http://forums.gentoo.org/viewtopic-t-986680.html
Below I'm specifying the support data asked for at http://pcsclite.alioth.debian.org/ccid.html#support:
Versions
CCID driver version: 1.4.15
pcsc-lite version: 1.8.11
smart card reader name: Cherry GmbH SmartTerminal XX44
the output of the command "/usr/sbin/pcscd --version": pcsc-lite version 1.8.11.
Copyright (C) 1999-2002 by David Corcoran <***@musclecard.com>.
Copyright (C) 2001-2011 by Ludovic Rousseau <***@free.fr>.
Copyright (C) 2003-2004 by Damien Sauveron <***@labri.fr>.
Report bugs to <***@lists.musclecard.com>.
Enabled
features: Linux i486-pc-linux-gnu serial usb libudev
usbdropdir=/usr/lib/readers/usb ipcdir=/run/pcscd
configdir=/etc/reader.conf.d
Platform
Operating
system or GNU/Linux distribution name and version: Linux
3.10.32-std402-i586 #2 SMP Mon Feb 24 21:56:40 UTC 2014 i686 Intel(R)
Atom(TM) CPU N450 @ 1.66GHz GenuineIntel GNU/Linux
(custom system rescue CD based on Gentoo)
Smart card middleware name and version: unknown/unused
Reader manufacturer name and reader model name: Cherry MY 8040 USB (multiboard)
Smart card name: unknown
Log
Attached log.txt (recorded while rdesktop connects to the Windows
Terminal Server and the user removes and reinserts again the smartcard
into the keyboard slot)
Any ideas?
Thanks,
Vieri