Cannot use HSM with debian 10 / vmware workstation

james · November 1, 2019, 3:38pm

I need to access my nitrokey HSM from a machine running Debian 10 (Buster).

I have tried various dpkg cominations but nothing works.
The error is:-

debian@debian:~$ pkcs11-tool --test --login
Using slot 0 with a present token (0x0)
Logging in to “UserPIN (SmartCard-HSM)”.
Please enter User PIN:
C_SeedRandom() and C_GenerateRandom():
seeding (C_SeedRandom) not supported
seems to be OK
Digests:
all 4 digest functions seem to work
MD5: OK
SHA-1: OK
RIPEMD160: OK
Signatures (currently only for RSA)
testing key 0 (RSA test key)
error: PKCS11 function C_SignFinal failed: rv = CKR_GENERAL_ERROR (0x5)
Aborting.

I can install and run OK on a Debian 9 machine.

sc-hsm · November 4, 2019, 9:01am

Does sc-hsm-tool produce an output ?

If it fails, try

OPENSC_DEBUG=9 sc-hsm-tool

to see what goes wrong.

Debian 10 is our development platform, so the device should work as expected. Just make sure you compile at least 0.19. The OpenSC version in Debian is 0.16 and quite outdated.

james · November 4, 2019, 9:54am

Output from sc-hsm-tool attached.

The device works fine with ubuntu xenial and debian stretch in a vm.

Tried with official release and package built locally with OpenSC-build.sh, same result.

sc-hsm-debug

sc-hsm-debug:

----------------------------------------------------------------------------------------------------------------

    0x7faa43ab41c0 09:25:15.502 [sc-hsm-tool] ctx.c:708:process_config_file: Used configuration file '/etc/opensc/opensc.conf'
0x7faa43ab41c0 09:25:15.502 [sc-hsm-tool] ctx.c:831:sc_context_create: ===================================
0x7faa43ab41c0 09:25:15.503 [sc-hsm-tool] ctx.c:832:sc_context_create: opensc version: 0.19.0
0x7faa43ab41c0 09:25:15.503 [sc-hsm-tool] reader-pcsc.c:819:pcsc_init: PC/SC options: connect_exclusive=0 disconnect_action=0 transaction_end_action=0 reconnect_action=0 enable_pinpad=1 enable_pace=1
0x7faa43ab41c0 09:25:15.503 [sc-hsm-tool] reader-pcsc.c:1300:pcsc_detect_readers: called
0x7faa43ab41c0 09:25:15.503 [sc-hsm-tool] reader-pcsc.c:1313:pcsc_detect_readers: Probing PC/SC readers
0x7faa43ab41c0 09:25:15.503 [sc-hsm-tool] reader-pcsc.c:1341:pcsc_detect_readers: Establish PC/SC context
0x7faa43ab41c0 09:25:15.503 [sc-hsm-tool] reader-pcsc.c:1257:pcsc_add_reader: Adding new PC/SC reader 'VMware Virtual USB CCID 00 00'
0x7faa43ab41c0 09:25:15.503 [sc-hsm-tool] reader-pcsc.c:320:refresh_attributes: VMware Virtual USB CCID 00 00 check
0x7faa43ab41c0 09:25:15.503 [sc-hsm-tool] reader-pcsc.c:348:refresh_attributes: current  state: 0x00000022
0x7faa43ab41c0 09:25:15.504 [sc-hsm-tool] reader-pcsc.c:349:refresh_attributes: previous state: 0x00000000
0x7faa43ab41c0 09:25:15.504 [sc-hsm-tool] reader-pcsc.c:404:refresh_attributes: card present, changed
0x7faa43ab41c0 09:25:16.853 [sc-hsm-tool] reader-pcsc.c:1430:pcsc_detect_readers: VMware Virtual USB CCID 00 00:SCardConnect(SHARED): 0x00000000
0x7faa43ab41c0 09:25:16.853 [sc-hsm-tool] reader-pcsc.c:1068:detect_reader_features: called
0x7faa43ab41c0 09:25:16.853 [sc-hsm-tool] reader-pcsc.c:1070:detect_reader_features: Requesting reader features ... 
0x7faa43ab41c0 09:25:16.853 [sc-hsm-tool] reader-pcsc.c:1091:detect_reader_features: Reader feature 12 found
0x7faa43ab41c0 09:25:16.853 [sc-hsm-tool] reader-pcsc.c:1008:part10_detect_max_data: get dwMaxAPDUDataSize property returned 0
0x7faa43ab41c0 09:25:16.853 [sc-hsm-tool] reader-pcsc.c:1221:detect_reader_features: Assuming that the reader supports transceiving short length APDUs only
0x7faa43ab41c0 09:25:16.853 [sc-hsm-tool] reader-pcsc.c:1047:part10_get_vendor_product: id_vendor=0e0f id_product=0004
0x7faa43ab41c0 09:25:16.854 [sc-hsm-tool] reader-pcsc.c:1445:pcsc_detect_readers: returning with: 0 (Success)
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] sc.c:275:sc_detect_card_presence: called
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] reader-pcsc.c:412:pcsc_detect_card_presence: called
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] reader-pcsc.c:320:refresh_attributes: VMware Virtual USB CCID 00 00 check
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] reader-pcsc.c:340:refresh_attributes: returning with: 0 (Success)
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] reader-pcsc.c:417:pcsc_detect_card_presence: returning with: 1
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] sc.c:280:sc_detect_card_presence: returning with: 1
Using reader with a card: VMware Virtual USB CCID 00 00
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] sc.c:275:sc_detect_card_presence: called
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] reader-pcsc.c:412:pcsc_detect_card_presence: called
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] reader-pcsc.c:320:refresh_attributes: VMware Virtual USB CCID 00 00 check
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] reader-pcsc.c:340:refresh_attributes: returning with: 0 (Success)
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] reader-pcsc.c:417:pcsc_detect_card_presence: returning with: 1
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] sc.c:280:sc_detect_card_presence: returning with: 1
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] card.c:196:sc_connect_card: called
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] reader-pcsc.c:534:pcsc_connect: called
0x7faa43ab41c0 09:25:16.856 [sc-hsm-tool] reader-pcsc.c:320:refresh_attributes: VMware Virtual USB CCID 00 00 check
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] reader-pcsc.c:340:refresh_attributes: returning with: 0 (Success)
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] reader-pcsc.c:566:pcsc_connect: Initial protocol: T=1
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:221:sc_connect_card: matching configured ATRs
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:265:sc_connect_card: matching built-in ATRs
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:283:sc_connect_card: trying driver 'cardos'
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1088:match_atr_table: ATR     : 3b:de:18:ff:81:91:fe:1f:c3:80:31:81:54:48:53:4d:31:73:80:21:40:81:07:1c
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:e2:00:ff:c1:10:31:fe:55:c8:02:9c
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:e9:00:ff:c1:10:31:fe:55:00:64:05:00:c8:02:31:80:00:47
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:fb:98:00:ff:c1:10:31:fe:55:00:64:05:20:47:03:31:80:00:90:00:f3
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:fc:98:00:ff:c1:10:31:fe:55:c8:03:49:6e:66:6f:63:61:6d:65:72:65:28
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:f4:98:00:ff:c1:10:31:fe:55:4d:34:63:76:b4
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:f2:18:00:ff:c1:0a:31:fe:55:c8:06:8a
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:d2:18:02:c1:0a:31:fe:58:c8:0d:51
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:d2:18:00:81:31:fe:58:c9:01:14
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:d2:18:00:81:31:fe:58:c9:02:17
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:d2:18:00:81:31:fe:58:c9:03:16
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:283:sc_connect_card: trying driver 'flex'
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1088:match_atr_table: ATR     : 3b:de:18:ff:81:91:fe:1f:c3:80:31:81:54:48:53:4d:31:73:80:21:40:81:07:1c
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:95:15:40:20:68:01:02:00:00
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:15:40:FF:68:01:02:02:01
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:15:40:FF:68:01:02:02:04
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:85:40:20:68:01:01:05:01
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:94:40:FF:63:01:01:02:01
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:15:40:FF:63:01:01:02:01
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:18:40:FF:64:02:01:01:02
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:18:40:FF:62:01:01:00:00
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:18:40:FF:62:01:02:01:04
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:18:40:FF:62:04:01:01:05
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:95:15:40:ff:68:01:02:45:47
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:E2:00:00:40:20:49:06
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:E2:00:00:40:20:49:05
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:E2:00:00:40:20:49:07
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:85:40:20:68:01:01:03:05
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:02:14:50
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:19:14:55:90:01:02:01:00:05:04:B0
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:32:15:00:06:80
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:32:15:00:06:95
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:19:14:59:01:01:0F:01:00:05:08:B0
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:19:14:55:90:01:01:01:00:05:08:B0
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:16:94:81:10:06:01:81:3F
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:16:94:81:10:06:01:81:2F
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:283:sc_connect_card: trying driver 'cyberflex'
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1088:match_atr_table: ATR     : 3b:de:18:ff:81:91:fe:1f:c3:80:31:81:54:48:53:4d:31:73:80:21:40:81:07:1c
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:95:15:40:20:68:01:02:00:00
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:15:40:FF:68:01:02:02:01
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:15:40:FF:68:01:02:02:04
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:85:40:20:68:01:01:05:01
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:94:40:FF:63:01:01:02:01
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:15:40:FF:63:01:01:02:01
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:18:40:FF:64:02:01:01:02
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:18:40:FF:62:01:01:00:00
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:18:40:FF:62:01:02:01:04
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:95:18:40:FF:62:04:01:01:05
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:95:15:40:ff:68:01:02:45:47
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:E2:00:00:40:20:49:06
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:E2:00:00:40:20:49:05
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:E2:00:00:40:20:49:07
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:85:40:20:68:01:01:03:05
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:02:14:50
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:19:14:55:90:01:02:01:00:05:04:B0
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:32:15:00:06:80
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:32:15:00:06:95
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:19:14:59:01:01:0F:01:00:05:08:B0
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:19:14:55:90:01:01:01:00:05:08:B0
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:16:94:81:10:06:01:81:3F
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:16:94:81:10:06:01:81:2F
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:283:sc_connect_card: trying driver 'gpk'
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1088:match_atr_table: ATR     : 3b:de:18:ff:81:91:fe:1f:c3:80:31:81:54:48:53:4d:31:73:80:21:40:81:07:1c
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:27:00:80:65:A2:04:01:01:37
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:27:00:80:65:A2:05:01:01:37
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:27:00:80:65:A2:0C:01:01:37
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:A7:00:40:14:80:65:A2:14:01:01:37
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:A7:00:40:18:80:65:A2:08:01:01:52
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:A7:00:40:18:80:65:A2:09:01:01:52
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:A7:00:40:18:80:65:A2:09:01:02:52
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:A7:00:40:18:80:65:A2:09:01:03:52
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.857 [sc-hsm-tool] card.c:283:sc_connect_card: trying driver 'gemsafeV1'
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1088:match_atr_table: ATR     : 3b:de:18:ff:81:91:fe:1f:c3:80:31:81:54:48:53:4d:31:73:80:21:40:81:07:1c
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7B:94:00:00:80:65:B0:83:01:01:74:83:00:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:6B:00:00:80:65:B0:83:01:01:74:83:00:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:6d:00:00:80:31:80:65:b0:83:01:02:90:83:00:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:6B:00:00:80:65:B0:83:01:03:74:83:00:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7A:94:00:00:80:65:A2:01:01:01:3D:72:D6:43
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7D:94:00:00:80:31:80:65:B0:83:01:01:90:83:00:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7D:96:00:00:80:31:80:65:B0:83:11:48:C8:83:00:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7D:95:00:00:80:31:80:65:B0:83:11:C0:A9:83:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7D:95:00:00:80:31:80:65:B0:83:11:C0:A9:83:00:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7D:95:00:00:80:31:80:65:B0:83:11:00:C8:83:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7D:95:00:00:80:31:80:65:B0:83:11:00:C8:83:00:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7D:96:00:00:80:31:80:65:B0:83:11:00:C8:83:00:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:7d:96:00:00:80:31:80:65:b0:83:02:01:f3:83:00:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:283:sc_connect_card: trying driver 'asepcos'
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1088:match_atr_table: ATR     : 3b:de:18:ff:81:91:fe:1f:c3:80:31:81:54:48:53:4d:31:73:80:21:40:81:07:1c
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:d6:18:00:81:b1:80:7d:1f:03:80:51:00:61:10:30:8f
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:d6:18:00:81:b1:fe:7d:1f:03:41:53:45:37:35:35:01
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:283:sc_connect_card: trying driver 'starcos'
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1088:match_atr_table: ATR     : 3b:de:18:ff:81:91:fe:1f:c3:80:31:81:54:48:53:4d:31:73:80:21:40:81:07:1c
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:B7:94:00:c0:24:31:fe:65:53:50:4b:32:33:90:00:b4
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:B7:94:00:81:31:fe:65:53:50:4b:32:33:90:00:d1
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:b7:18:00:c0:3e:31:fe:65:53:50:4b:32:34:90:00:25
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:d8:18:ff:81:b1:fe:45:1f:03:80:64:04:1a:b4:03:81:05:61
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3b:d3:96:ff:81:b1:fe:45:1f:07:80:81:05:2d
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:9B:96:C0:0A:31:FE:45:80:67:04:1E:B5:01:00:89:4C:81:05:45
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:DB:96:FF:81:31:FE:45:80:67:05:34:B5:02:01:C0:A1:81:05:3C
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:D9:96:FF:81:31:FE:45:80:31:B8:73:86:01:C0:81:05:02
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:DF:96:FF:81:31:FE:45:80:5B:44:45:2E:42:4E:4F:54:4B:31:31:31:81:05:A0
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:DF:96:FF:81:31:FE:45:80:5B:44:45:2E:42:4E:4F:54:4B:31:30:30:81:05:A0
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:D9:96:FF:81:31:FE:45:80:31:B8:73:86:01:E0:81:05:22
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:283:sc_connect_card: trying driver 'tcos'
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1088:match_atr_table: ATR     : 3b:de:18:ff:81:91:fe:1f:c3:80:31:81:54:48:53:4d:31:73:80:21:40:81:07:1c
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:BA:13:00:81:31:86:5D:00:64:05:0A:02:01:31:80:90:00:8B
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:BA:14:00:81:31:86:5D:00:64:05:14:02:02:31:80:90:00:91
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:BA:96:00:81:31:86:5D:00:64:05:60:02:03:31:80:90:00:66
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:BA:96:00:81:31:86:5D:00:64:05:7B:02:03:31:80:90:00:7D
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:BF:96:00:81:31:FE:5D:00:64:04:11:03:01:31:C0:73:F7:01:D0:00:90:00:7D
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:BF:96:00:81:31:FE:5D:00:64:04:11:04:0F:31:C0:73:F7:01:D0:00:90:00:74
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:BF:B6:00:81:31:FE:5D:00:64:04:28:03:02:31:C0:73:F7:01:D0:00:90:00:67
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:283:sc_connect_card: trying driver 'oberthur'
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1088:match_atr_table: ATR     : 3b:de:18:ff:81:91:fe:1f:c3:80:31:81:54:48:53:4d:31:73:80:21:40:81:07:1c
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7D:18:00:00:00:31:80:71:8E:64:77:E3:01:00:82:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7D:18:00:00:00:31:80:71:8E:64:77:E3:02:00:82:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7D:11:00:00:00:31:80:71:8E:64:77:E3:01:00:82:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7D:11:00:00:00:31:80:71:8E:64:77:E3:02:00:82:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:7B:18:00:00:00:31:C0:64:77:E3:03:00:82:90:00
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1099:match_atr_table: ATR try : 3B:FB:11:00:00:81:31:FE:45:00:31:C0:64:77:E9:10:00:00:90:00:6A
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:1102:match_atr_table: ignored - wrong length
0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:283:sc_connect_card: trying driver 'authentic'

sc-hsm · November 4, 2019, 10:16am

The log seems incomplete. Is

0x7faa43ab41c0 09:25:16.858 [sc-hsm-tool] card.c:283:sc_connect_card: trying driver ‘authentic’

really the last line ?

Btw. the VMware Virtual USB CCID 00 00 is not a transparent interface, but does some changes in the stack. We’ve seen a lot of issues at customers using that integration. Your mileage may vary. If possible, try a transparent USB integration.

james · November 4, 2019, 10:27am

Problem seems to be vmware workstation.

Works fine with vanilla install on qemu/kvm.

Will need to persuade colleague to switch to qemu.
Thanks for all the help.

jimmypw · November 22, 2019, 7:16pm

You need to enable chip card interface device put this in your vmx file.

usb.generic.allowCCID = TRUE