2016-06-19 10:00 GMT+02:00 Jay Aurabind <[email protected]>: > Hi, >
Hello > > I bought a new usb crypto token epass2003auto. I used pkcs15-init to > initially create some keys on it. Later I decided to erase the token, > and from then onwards, I am unable to use my token for anything. I > always get this message "Failed to erase card: Security status not > satisfied" every time I try to erase it. I cannot create new keys > either. Here is what I saw with opesc-explorer: > > > OpenSC [3F00]> erase > Failed to erase card: Security status not satisfied > OpenSC [3F00]> info > > Dedicated File ID 3F00 > > File path: 3F00 > File size: 0 bytes > DF name: entersafe-fips > ACL for SELECT: N/A > ACL for LOCK: N/A > ACL for DELETE: N/A > ACL for CREATE: N/A > ACL for REHABILITATE: N/A > ACL for INVALIDATE: N/A > ACL for LIST FILES: N/A > ACL for CRYPTO: N/A > ACL for DELETE SELF: N/A > Proprietary attributes: 00 7F > Security attributes: 9F 9F FF 9F FF FF FF FF > > > Somebody else reported the issue with OpenSC github[1], but Feitian is > giving a tool under nda to fix the issue. I too got the tool as well, > but even that aint working. I've been mailing the contact at feitian, > but no responses. From the output of that tool, I speculate that it > needs a properly initialized pcscd running on the system. (the tool > complains about a service not found) > > Hopefully if I solve the pcscd problem, this tool might work to fix my > ePass2003auto > > Kindly help me fix the issue. Below are the details you need: > > USB Token: Feitian ePass2003auto > USB driver version: CCID 1.4.24 > > Output of pcscd --version: > > pcsc-lite version 1.8.17. > Copyright (C) 1999-2002 by David Corcoran <[email protected]>. > Copyright (C) 2001-2015 by Ludovic Rousseau <[email protected]>. > Copyright (C) 2003-2004 by Damien Sauveron <[email protected]>. > Report bugs to <[email protected]>. > Enabled features: Linux x86_64-unknown-linux-gnu serial usb libudev > usbdropdir=/usr/local/lib/pcsc/drivers ipcdir=/var/run/pcscd > configdir=/usr/local/etc/reader.conf.d > > However, directory /usr/local/etc/reader.conf.d does not exist. > > Platform: OS: Fedora 23, using latest versions of pcsc, built locally. > Why do you build pcsc-lite yourself instead of using a Fedora package? > > Please revert back to me if you any more information. Full log is > attached as well. > You get the card ATR so pcsc-lite + driver is working. Your token is a composite device with more than 1 interface. The other interface is not CCID so the driver reported an error and pcscd complained. Maybe I should fix this behavior. But I do not have this ATR in my list. Please submit your token at http://smartcard-atr.appspot.com/parse?ATR=3B9F958131FE9F006646530523002571DF000003900096 Bye -- Dr. Ludovic Rousseau
_______________________________________________ Pcsclite-muscle mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pcsclite-muscle
