Sunday, September 30, 2007

Aladdin usb token

Played with an old Aladdin Knowledge Systems eToken Pro v4.1.5.x on openSUSE 10.3

  • installed openct and libopenct packages
  • installed the pkcs11 packages: libp11 and pam_p11
  • installed pcsc-etoken package from software.opensuse.org
Here are some notes:

# lsusb
Bus 004 Device 002: ID 0483:0321 SGS Thomson Microelectronics
Bus 004 Device 001: ID 0000:0000
Bus 003 Device 001: ID 0000:0000
Bus 002 Device 005: ID 0529:050c Aladdin Knowledge Systems eToken Pro v4.1.5.x
Bus 002 Device 001: ID 0000:0000
Bus 001 Device 005: ID 05bc:0102 3G Green Green Globe Co., Ltd
Bus 001 Device 004: ID 0451:2046 Texas Instruments, Inc. TUSB2046 Hub
Bus 001 Device 003: ID 0566:3002 Monterey International Corp.
Bus 001 Device 001: ID 0000:0000

#openct-control init
[this initializes openct and registers the token]

#opensc-tool -l
Readers known about:
Nr. Driver Name
0 openct Aladdin eToken PRO
1 openct OpenCT reader (detached)
2 openct OpenCT reader (detached)
3 openct OpenCT reader (detached)
4 openct OpenCT reader (detached)


#cardos-info
Info : CardOS/M4.0 (C) Siemens AG 1994-1999 (Feb 15 2000)
Chip type: 20
Serial number: 10 b1 25 27 1e 0c
Full prom dump:
33 FF EA 31 FF FF FF FF 14 65 10 B1 25 27 1E 0C 3..1.....e..%'..
00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................
OS Version: 200.2 (that's CardOS M4.0)
Current life cycle: 32 (administration)
Security Status of current DF:
Free memory : 7
ATR Status: 0x0 ROM-ATR
Packages installed:
01 04 01 01 C8 02 01 04 08 01 C8 02 01 04 03 01 ................
C8 02 01 04 0B 01 C8 02 01 04 07 03 C8 02 ..............
Ram size: 1024, Eeprom size: 16384, cpu type: 66, chip config: 61
Free eeprom memory: 1185
System keys: PackageLoadKey (version 0x01, retries 10)
System keys: StartKey (version 0x01, retries 10)
Path to current DF:
66 66 10 00 ff..

# opensc-tool --reader 0 --name
CardOS M4


device 0529-050c exist in /etc/openct.conf
driver etoken {
ids = {
usb:0529/050c,
usb:0529/0514,
};


# openct-tool list
0 Aladdin eToken PRO


# openct-control status
No. Name Info
===================================================
0 Aladdin eToken PRO slot0: card present

# opensc-explorer
OpenSC Explorer version 0.11.3
OpenSC [3F00]> ls
FileID Type Size
[6666] DF 1185 Name: AKS
[5015] DF 1185
2F00 wEF 128

LOG FILE
Sep 30 09:45:42 kernel: usb 2-1: USB disconnect, address 6
Sep 30 09:45:47 kernel: usb 2-1: new low speed USB device using uhci_hcd and address 7
Sep 30 09:45:47 kernel: usb 2-1: new device found, idVendor=0529, idProduct=050c
Sep 30 09:45:47 kernel: usb 2-1: new device strings: Mfr=1, Product=2, SerialNumber=0
Sep 30 09:45:47 kernel: usb 2-1: Product: eToken Pro 4154
Sep 30 09:45:47 kernel: usb 2-1: Manufacturer: AKS
Sep 30 09:45:47 kernel: usb 2-1: configuration #1 chosen from 1 choice



**********


# pkcs15-init -E (Erase the smart card )
Connecting to card in reader Aladdin eToken PRO...
Using card driver Siemens CardOS.
About to erase card.
PIN [Security Officer PIN] required.
Please enter PIN [Security Officer PIN]:
PIN [Security Officer PIN] required.
Please enter PIN [Security Officer PIN]:
About to create PKCS #15 meta structure.
New Security Officer PIN (Optional - press return for no PIN).
Please enter Security Officer PIN:
Please type again to verify:
Unblock Code for New User PIN (Optional - press return for no PIN).
Please enter User unblocking PIN (PUK):
Please type again to verify:

# pkcs15-init -C (Create structure on device)

Follow the notes on:
http://www.opensc-project.org/opensc/wiki/QuickStart


pkcs15-init --store-certificate req.pem --auth-id 01 --id 45 --format pem
[pkcs15-init] card-cardos.c:251:cardos_check_sw: not enough memory
[pkcs15-init] card.c:367:sc_create_file: returning with: Card command failed
Failed to store certificate: Card command failed

No comments: