diff options
| author | Jack Magne <jmagne@dhcp-16-206.sjc.redhat.com> | 2017-03-24 15:56:17 -0700 |
|---|---|---|
| committer | Jack Magne <jmagne@dhcp-16-206.sjc.redhat.com> | 2017-04-12 18:47:49 -0700 |
| commit | 164087b1fc302dd8b125cd52e9e55f54ea97e09d (patch) | |
| tree | 41f11acf0b8d32ce4269f58b60c03940becefc44 /base/tps | |
| parent | 92b68d7ab3f58ad80a545f550f0598de2c43da2c (diff) | |
| download | pki-164087b1fc302dd8b125cd52e9e55f54ea97e09d.tar.gz pki-164087b1fc302dd8b125cd52e9e55f54ea97e09d.tar.xz pki-164087b1fc302dd8b125cd52e9e55f54ea97e09d.zip | |
SCP03 support for g&d sc 7 card.
This allows the use of the g&d 7 card.
This will require the following:
1. An out of band method is needed to generate an AES based master key.
We do not as of yet have support with tkstool for this:
Ex:
/usr/lib64/nss/unsupported-tools/symkeyutil -d . -K -n new_master_aes -t aes -s 16
2. There are some new config params that can be adjusted to support either the 6.0 or 7.0 cards:
Ex:
tks.defKeySet._005=## tks.prot3 , protocol 3 specific settings
tks.defKeySet._006=## divers= emv,visa2 : Values for the master key case, or > version one.
tks.defKeySet._007=## diversVer1 = emv,visa2, or none. This is for developer or version one keyset
tks.defKeySet._008=## devKeyType = DES3or AES. This is for the key type of developer or version one keys.
tks.defKeySet._009=## masterKeyType = DES3 or AES. This is for the type of key for the master key.
tks.defKeySet._010=##
tks.defKeySet._011=## Only supports two tokens now: G&D Smart Cafe 6 and Smart Cafe 7, use these exact settings
tks.defKeySet._013=## Smart Cafe 6 settings:
tks.defKeySet._014=## tks.defKeySet.prot3.divers=emv
tks.defKeySet._015=## tks.defKeySet.prot3.diversVer1Keys=emv
tks.defKeySet._016=## tks.defKeySet.prot3.devKeyType=DES3
tks.defKeySet._017=## tks.defKeySet.prot3.masterKeyType=DES3
tks.defKeySet._018=##Smart Cafe 7 settings:
tks.defKeySet._019=## tks.defKeySet.prot3.divers=none
tks.defKeySet._020=## tks.defKeySet.prot3.diversVer1Keys=none
tks.defKeySet._021=## tks.defKeySet.prot3.devKeyType=AES
tks.defKeySet._022=## tks.defKeySet.prot3.masterKeyType=AES
tks.defKeySet._023=##
tks.defKeySet._024=##
Diffstat (limited to 'base/tps')
| -rw-r--r-- | base/tps/shared/conf/CS.cfg | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/base/tps/shared/conf/CS.cfg b/base/tps/shared/conf/CS.cfg index 8d667f501..2d9057a39 100644 --- a/base/tps/shared/conf/CS.cfg +++ b/base/tps/shared/conf/CS.cfg @@ -10,7 +10,7 @@ applet._001=# applet information applet._002=# SAF Key: applet._003=# applet.aid.cardmgr_instance=A0000001510000 applet._004=# Stock RSA,KeyRecover applet : 1.4.58768072.ijc -applet._005=# Beta RSA/KeyRecovery/GP211/SCP02 applet : 1.5.558cdcff.ijc +applet._005=# RSA/KeyRecovery/GP211/SCP02, SCP03 applet : 1.5.558cdcff.ijc applet._006=# Use GP211 applet only with SCP02 card applet._007=######################################### applet.aid.cardmgr_instance=A0000000030000 |