thanks fmarzocca.. How about Linux in general, doesnt _have_ to be Ubuntu.. but would be nice.
Main Topics
Browse All TopicsHi,
I am trying to use a smart cards on Ubuntu.. I am not looking to use them to login, just to store certificates and sign certificates. The problem I have is that I can not read any certificates from the smart card or write to it.
I have tried to get it running on Ubuntu 7, 8 and now running 9.04 beta.
The smart card is a Gemalto .net V2 smart card and the card reader is a Gemplus TWIN USB card reader.
I have the following packages installed
root@certificate01:~# dpkg -l | grep pcsc
ii libpcsc-perl 1.4.7-1 Perl interface to the PC/SC smart card libra
ii libpcsclite1 1.4.102-1ubuntu2 Middleware to access a smart card using PC/S
ii pcsc-tools 1.4.14-1 Some tools to use with smart cards and PC/SC
ii pcscd 1.4.102-1ubuntu2 Middleware to access a smart card using PC/S
root@certificate01:~# dpkg -l | grep opensc
ii libopensc2 0.11.4-5ubuntu1 SmartCard library with support for PKCS#15 c
ii mozilla-opensc 0.11.4-5ubuntu1 Mozilla plugin for authentication using Open
root@certificate01:~# dpkg -l | grep openct
ii libopenct1 0.6.14-3ubuntu2 middleware framework for smart card terminal
ii openct 0.6.14-3ubuntu2 middleware framework for smart card terminal
root@certificate01:~# dpkg -l | grep dot
ii libgemaltodotnetp11 2.1.1-1ubuntu2 .NET PKCS#11 library
I have followed the gemalto instructions here:
http://www.gemalto.com/pro
and also installed the deb package from the above link.
I have had little success reading information from the smart card but normally at most all I can obtain using opensc openct is that it can see the card and list the card attributes, but nothing further.
When I load the /usr/lib/pkcs11/libgtop11d
Can anyone me some better instructions then what gemalto provide or other packages to use that will allow me to use the smart card?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
You can have a look here:
http://tuxmobil.org/smart_
yeah cant see much there that I havent tried
FYI when using the pkcs11
~# pkcs15-init -C
Card not present.
~# pkcs11-tool -vvv -O
error: PKCS11 function C_OpenSession failed: rv = CKR_TOKEN_NOT_PRESENT (0xe0)
Aborting.
:~#
It doesnt seem to see the card....
Is there a way to ensure that pcks11 is using the /usr/lib/pkcs11/libgtop11d
You also need to install "libccid" if you have not already. Otherwise your reader isn't going to work.
Are there currently any certificates on your card?
When you add the module to Firefox does the reader show up? Assuming your reader is plugged in and recognized then you should see it listed after you "Load" the Gemalto PKCS#11 module. Right under the name of the added module you should see "Gemplus GemPC Twin 00 00" or similar. If you don't see that then something higher level isn't working (maybe pcscd, missing libccid, etc).
Note that the pkcs11 and pkcs15 tools you are using from the command line may not recognize your card. Those tools are part of OpenSC which have their own supported cards. However, OpenSC pkcs11-tool can work with other PKCS#11 modules and it may or may not work with the Gemalto module. Use the "--module" option to pkcs11-tool to specify the module to use. Like: "pkcs11-tool --module /usr/lib/libgtop11dotnet.s
I don't know if I would bother with those tools right now though. First get it working in Firefox because that is the one known thing that should work. If you do not have any certs on the card then you will either need a PKCS#12 file to import or a certificate authority you can use to generate the keys and cert. If you have a Microsoft CA server handy you can use that or Verisign offers free 60-day certs (digitalid.verisign.com, select e-mail certificates, select "Buy", then select the free 60-day option when you get to the information screen). You would need import the PKCS#12 or go to the CA using Firefox.
Business Accounts
Answer for Membership
by: fmarzoccaPosted on 2009-08-21 at 07:16:43ID: 25152010
At the momento there is a very little (or nothing at all) support for smart cards on ubuntu. I read it is on the due list.