You might want to play with changing "false" to "true in the CS.cfg for
op.enroll.userKey.update.applet.emptyToken.enable=false or the
op.format... equivalent , etc.
From: Julius Adewumi
@GDC4S.com
Ph:480-441-6768
Contract Corp:MTSI
________________________________
From: pki-users-bounces(a)redhat.com [mailto:pki-users-bounces@redhat.com]
On Behalf Of Zach Casper
Sent: Tuesday, December 23, 2008 12:00 PM
To: pki-users(a)redhat.com
Subject: RE: [Pki-users] ESC Format / Enroll Error
Tps-debug log shows the following:
RA_Format_Processor::Process - applet upgrade failed
Tps-error log show the following:
RA_Processor::SetupSecureChannel - Failed to create a secure channel 0-
potentially due to an RA/TKS key mismatch or differing RA/TKS key
versions.
RA_Processor::UpgradeApplet -0 channel create failure
And a series of Bad Response when trying to SelectApplet or GetStatus
zach
_____________________________________________
From: Jack Magne [mailto:jmagne@redhat.com]
Sent: Tuesday, December 23, 2008 1:10 PM
To: Zach Casper
Subject: Re: [Pki-users] ESC Format / Enroll Error
The first step would be to take a look at the tps log or smart card
server.
These can be found at:
/var/lib/pki-tps/logs/tps-debug.log
Search the bottom of the log for error 19 and it should give you an idea
of what TPS was trying to do at the time.
Zach Casper wrote:
We have an Infineon Smart Card and currently we are unable to
Format/Enroll due to the following ESC Error
"Formatting of smart card failed. Error: The Smart Card Server
cannot
upgrade the software on your smart card."
And Diagnostics show this error:
"Attempting to Format Key, ID: ####### - Key Format failure,
Error:
19."
This card comes up as "Formatted" because we've
manually installed a
version of the Dogtag applet prior to using ESC & Dogtag.
Any advice on how we can troubleshoot?
--
Zach Casper
Envieta LLC
----------------------------------------
------------------------------------------------------------------------
_______________________________________________
Pki-users mailing list
Pki-users(a)redhat.com