[Pcsclite-muscle] issues with OmniKey 3121 and InCard cards

Umberto Rustichelli umberto.rustichelli at gt50.org
Tue May 8 06:41:15 PDT 2018


Respectable, my knowledge of the SW stack to use smart cards is very 
limited, so please forgive me if I'm missing something here... I need to 
understand what is the possible problem here.

Recently my company received a batch of cards,

most with ATR 
3b:ff:96:00:ff:81:31:fe:55:00:6b:02:09:04:03:01:01:01:43:4e:53:10:31:80:14

some with ATR 
3b:ff:18:00:00:81:31:fe:55:00:6b:02:09:04:03:01:01:01:43:4e:53:10:31:80:65

They are supposed to be used with the proprietary driver libbi4ixpki.so, 
I have three versions of it.

The combination work fine with some readers but I have issue with two 
products, one being the reader OmniKey 3121, the main issue being that I 
cannot generate a key pair on the tokens (both ATR).

Software in use: Slackware current (but the issue has been replicated 
with Slackware 14.1 and RHEL 6, too), pcsc-lite-1.8.23, ccid-1.4.29, 
opensc-0.18.0-rc2 and the PKCS#11 module libbi4ixpki.so (all versions in 
my possession).

With some libbi4ixpki.so drivers and depending on the ATR, I may also 
see "pcscd: commands.c:2280:SetParameters Card absent or mute" during 
some operations, but the main issue remains the key generation (2048 
bit) where I see, after login has been performed, so the issue manifests 
during C_GenerateKeyPair:

May  8 11:54:24 longrun pcscd: commands.c:2280:SetParameters Card absent 
or mute
May  8 11:54:26 longrun pcscd: commands.c:1771:CmdXfrBlockTPDU_T0() 
Command too long (290 bytes) for max: 261 bytes
May  8 11:54:26 longrun pcscd: ifdwrapper.c:543:IFDTransmit() Card not 
transacted: 612
May  8 11:54:26 longrun pcscd: winscard.c:1620:SCardTransmit() Card not 
transacted: 0x80100016

What can I do to fix this? Can I tweak pcsc or ccid or opensc to deal 
with this, or is it an issue with the proprietary driver? Or is it a 
bug? In ccid? PCSC-lite?

By the question you surely understand I have little knowledge of the 
architecture (and also of runtime configuration). Any clue?

Thanks - Umberto





More information about the pcsclite-muscle mailing list