Re: [Opensc-devel] SO PIN creation

[Peter P. <pop...@gm...>]

Hi,

please check activation proces ..

$ OPENSC_DEBUG=255 pkcs15-init -F

(remove all sensitive information from output - PINs etc.. before sending
this output here, or directly to me)



There is way to activate card directly by APDU .. (
https://webservices.aventra.fi/wordpress/wp-content/downloads/MyEID_PKI_JavaCard_Applet_Reference_Manual_2-1-4.pdf
, page 37)
(I can not guarantee you anything,  maybe opensc fails with this card after
activation etc..).


1. opensc-explorer, check if pin ID1 and 3 is functional

OpenSC [3F00]> verify CHV1
Please enter PIN:
Code correct.
OpenSC [3F00]> verify CHV3
Please enter PIN:
Code correct.


2. use APDU to card activation:
OpenSC [3F00]> apdu 00 44 04 00 0c A0 00 00 00 63 50 4B 43 53 2D 31 35
Sending: 00 44 04 00 0C A0 00 00 00 63 50 4B 43 53 2D 31 35
Received (SW1=0x90, SW2=0x00)
Success!
OpenSC [3F00]>



On Thu, Apr 19, 2018 at 11:31 PM, Maksym Tiurin <mr...@bu...>
wrote:

> Sounds like activation process is not so simple.
>
> I tried to upload 4401 from card with SO pin.
>
> I tried to upload 4401 and 5032 from card with SO pin.
>
> Without any success :(
>
> I see SO PIN in dump now:
>
> PIN [Security Officer PIN]
>     Object Flags   : [0x3], private, modifiable
>     ID             : ff
>     Flags          : [0xB0], initialized, needs-padding, soPin
>     Length         : min_len:4, max_len:8, stored_len:8
>     Pad char       : 0xFF
>     Reference      : 3 (0x03)
>     Type           : ascii-numeric
>
> But when I try to activate this card I receive the same error:
>
> Failed to finalizing card: Not allowed
>
>
>