Nitrokey Pro not detected on macOS 11.3

Nitrokeys
1

Hi everyone,

since the latest macOS update - or maybe the update of gpg or libgcrypt !? - I’m facing the issue, that the Nitrokey Pro cannot be detected:

$ gpg --card-status
gpg: selecting card failed: Operation not supported by device
gpg: OpenPGP card not available: Operation not supported by device

I’m running macOS 11.3 with the following gpg versions:

$ gpg --version
gpg (GnuPG) 2.3.1
libgcrypt 1.9.3

I tried the following:

$ system_profiler SPUSBDataType | grep Nitrokey
2021-04-29 10:19:27.553 system_profiler[13998:129816] SPUSBDevice: 
IOCreatePlugInInterfaceForService failed 0xe00002be
2021-04-29 10:19:27.554 system_profiler[13998:129816] SPUSBDevice: 
IOCreatePlugInInterfaceForService failed 0xe00002be
2021-04-29 10:19:27.554 system_profiler[13998:129816] SPUSBDevice: 
IOCreatePlugInInterfaceForService failed 0xe00002be
2021-04-29 10:19:27.555 system_profiler[13998:129816] SPUSBDevice: 
IOCreatePlugInInterfaceForService failed 0xe00002be
2021-04-29 10:19:27.555 system_profiler[13998:129816] SPUSBDevice: 
IOCreatePlugInInterfaceForService failed 0xe00002be
2021-04-29 10:19:27.556 system_profiler[13998:129816] SPUSBDevice: 
IOCreatePlugInInterfaceForService failed 0xe00002be
2021-04-29 10:19:27.556 system_profiler[13998:129816] SPUSBDevice: 
IOCreatePlugInInterfaceForService failed 0xe00002be
        Nitrokey Pro:
          Manufacturer: Nitrokey

and:

$ ioreg | grep -i Nitrokey
    | |   |   | +-o Nitrokey Pro@14100000  <class IOUSBHostDevice, id 0x100001082, registered, matched, active, busy 0 (106 ms), retain 75>
    | |     +-o Nitrokey Pro@14100000  <class AppleUSBDevice, id 0x100001084, registered, matched, active, busy 0 (1 ms), retain 19>

Does someone have an idea, how to solve that issue?

Thanks and regards,
Peter

2

Downgrade to gnupg@2.2 helped.

$ brew uninstall gnupg, libgcrypt
$ brew install gnupg@2.2
2 Likes
3

Hey super sorry for the late response.
I was able to reproduce your problem and also your solution with the same result.

I filed an issue to the upstream to let the guys at GPG know about this.

1 Like
4

This affects all Nitrokey’s with OpenPGP/ GnuPG email encryption features:
Nitrokey Storage 2
Nitrokey Pro 2
Nitrokey Start

please use the phafke solution to fix this for for now

2 Likes
5

@Lennard can you link the ticket here?

6

I was pointed to this ticket https://dev.gnupg.org/T5409

disable-ccid makes gpg 2.3.1 work

add line disable-ccid to ~/.gnupg/scdaemon.conf
Create the file if it does not exist

2 Likes
7

Hi,
I purchased a Nitrokey Pro 2 recently and got exact same problem as phafke on macOS 12.6.
gpg was installed with GPG Suite https://gpgtools.org/.
Creating scdaemon.conf file didn’t do anything.
Any other solution?

Thanks

8

Ok. Got it. I made two mistakes :smiling_face: First one my nitrokey is a 3A NFC one and I miss Nitrokey App v1.4 does not handle NK3 :upside_down_face: we have to use nitropy for the moment. Rather rough. Need to learn…

1 Like