Re: [Pki-devel] Red Hat Certificate System - Token problem
Hello:
A couple of things you might want to try on these tokens that we have not tested here:
1. In the /var/lib/pki-tps/CS.cfg there is an entry like this:
applet.aid.cardmgr_instance=blah
Perhaps for your cards, this value might be different? If it is, add it there.
2. IN the /var/lib/pki-tks/CS.cfg there are lines that speak to the default keyset like:
tks.defKeySet.auth_key=#40#41#42...
Perhaps with your keys, this may be different? I would not think so, but it would be
something to check.
----- Original Message -----
From: "Carlos Franciosi" <cfrancio(a)redhat.com>
To: pki-devel(a)redhat.com
Sent: Wednesday, April 7, 2010 8:40:16 AM GMT -08:00 US/Canada Pacific
Subject: [Pki-devel] Red Hat Certificate System - Token problem
Hi,
I've been working in a RHCS project for a year and now we have some problems with the
format process of the tokens.
When we try to format the token with the ESC the following error appears:
"Formatting of smart card failed. Error: The Smart Card Server cannot upgrade the
software on your smart card."
We are using the Gemalto "USB eSeal Token V2"
(http://www.gemalto.com/products/usb_eseal_token/). I've also tested the RSA sid800
with the same results.
Note: These tokens support Global Platform and JavaCard standards !
I've also checked the /var/log/pki-tps/tps-error.log and I found the following:
[2010-04-03 04:06:32] f39a83f0 RA_Processor::SelectApplet - Bad Response
[2010-04-03 04:06:32] f39a83f0 RA_Processor::SelectApplet - Bad Response
[2010-04-03 04:06:32] f39a83f0 RA_Processor::GetStatus - Bad Response
[2010-04-03 04:06:32] f39a83f0 RA_Processor::GetAppletVersion - Bad Response
[2010-04-03 04:06:40] f39a83f0 RA_Processor::SelectApplet - Bad Response
[2010-04-03 04:06:40] f39a83f0 RA_Processor::SetupSecureChannel - Failed to create a
secure channel - potentially due to an RA/TKS key mismatch or differing RA/TKS key
versions.
[2010-04-03 04:06:40] f39a83f0 RA_Processor::UpgradeApplet - channel creation failure
[2010-04-03 04:06:40] f39a83f0 RA_Processor::SelectApplet - Bad Response
Any help would be much appreciated.
Ing. Carlos Franciosi - RHCA / RHCDS
Regional Solution Architect
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel