Re: [Opensc-devel] Failed to connect to card: Card is invalid or cannot be handled

[Ondrej M. <ond...@ni...>]

On 07/25/2013 01:48 PM, Tomáš Lavický wrote:
> Our company started to use HID Crescendo iCLASS Px G8H cards and HID Global’s
> ActivID® CMS Appliance for user logons. Since ActivClient middleware has x86
> Linux version only I'm trying to use OpenSC on my KUbuntu 12.04 box to access
> certificates stored on the card.

It's very probable that the HID iCLASS card with ActivID application won't have
PKCS#15 structure, but some other proprietary one. Thus you probably won't be
able to easily dump certificates. If they provided you with a pkcs11 library for
the card, you could try "pkcs11-tool" (see --module option).

> I can see ATR via pcsc_scan but not via opensc-tool:

I have a card that behaves in a similar way when accessed through NFC interface
- ACS ACOS5 card. The reason for this is that "opensc-tool -a" also tries to
send an APDU which fails:

00000012 APDU: 00 C0 00 00 00
00000294 SW:
00000037 ifdwrapper.c:520:IFDTransmit() Card not transacted: 612
00000032 winscard.c:1564:SCardTransmit() Card not transacted: 0x80100016

My guess would be that both your Crescendo iCLASS and the ACOS5 NFC interface
don't support ISO-7816 APDUs (ACOS5 card can be still dumped via libnfc).

Ondrej