Re: [Pki-users] ESC Format / Enroll Error

You might want to play with changing "false" to "true in the CS.cfg for op.enroll.userKey.update.applet.emptyToken.enable=false or the op.format... equivalent , etc. /From: Julius Adewumi/ /(a)GDC4S.com/ /Ph:480-441-6768/ /Contract Corp:MTSI/ ------------------------------------------------------------------------ *From:* pki-users-bounces(a)redhat.com [mailto:pki-users-bounces@redhat.com] *On Behalf Of *Zach Casper *Sent:* Tuesday, December 23, 2008 12:00 PM *To:* pki-users(a)redhat.com *Subject:* RE: [Pki-users] ESC Format / Enroll Error Tps-debug log shows the following: RA_Format_Processor::Process – applet upgrade failed Tps-error log show the following: RA_Processor::SetupSecureChannel – Failed to create a secure channel 0- potentially due to an RA/TKS key mismatch or differing RA/TKS key versions. RA_Processor::UpgradeApplet -0 channel create failure And a series of Bad Response when trying to SelectApplet or GetStatus zach _____________________________________________ *From:* Jack Magne [mailto:jmagne@redhat.com] *Sent:* Tuesday, December 23, 2008 1:10 PM *To:* Zach Casper *Subject:* Re: [Pki-users] ESC Format / Enroll Error The first step would be to take a look at the tps log or smart card server. These can be found at: /var/lib/pki-tps/logs/tps-debug.log Search the bottom of the log for error 19 and it should give you an idea of what TPS was trying to do at the time. Zach Casper wrote: > > We have an Infineon Smart Card and currently we are unable to > Format/Enroll due to the following ESC Error > > “Formatting of smart card failed. Error: The Smart Card Server cannot > upgrade the software on your smart card.” > > And Diagnostics show this error: > > “Attempting to Format Key, ID: ####### - Key Format failure, Error: 19.” > > This card comes up as “Formatted” because we’ve manually installed a > version of the Dogtag applet prior to using ESC & Dogtag. > > Any advice on how we can troubleshoot? > > -- > > Zach Casper > > Envieta LLC > > ---------------------------------------- > > ------------------------------------------------------------------------ > > _______________________________________________ > Pki-users mailing list > Pki-users(a)redhat.com > https://www.redhat.com/mailman/listinfo/pki-users > ------------------------------------------------------------------------ _______________________________________________ Pki-users mailing list Pki-users(a)redhat.com https://www.redhat.com/mailman/listinfo/pki-users