Nitrokey Pro not detected on macOS Sonoma

Nitrokeys
1

Hi everyone,

similar to a past macOS 11.3 upgrade (see ticket) I am currently figuring an issue with the yesterday macOS Sonoma update, that the Nitrokey Pro is not detected.

$ gpg --card-status
gpg: selecting card failed: Operation not supported by device
gpg: OpenPGP card not available: Operation not supported by device

These are the current versions:

$ gpg --version
gpg (GnuPG) 2.4.3
libgcrypt 1.10.2

The device itself is beeing detected by the OS:

$ system_profiler SPUSBDataType | grep Nitrokey
        Nitrokey Pro:
          Manufacturer: Nitrokey

$ ioreg | grep -i Nitrokey
    | |   | | | +-o Nitrokey Pro@02100000  <class IOUSBHostDevice, id 0x1000012af, registered, matched, active, busy 0 (26 ms), retain 34>

As last time, I tried to downgrade the gnupg version to 2.2 - but this time it didn’t help.

Does someone already have an idea how to solve it this time?

Thanks and regards,
Peter

2

Downgrading is unlikely to help and can be contraproductive, what about disabling internal CCID facility? Nitrokey Pro not detected on macOS 11.3 - #6 by Lennard

Make sure you have pcscd running.

3

I already added disable-ccid in my ~/.gnupg/scdeamon.conf but I have no clue what pcscd is, or if it is running. I’ve made a brew install pcsc-lite and restared the gpg-agent,… but still get

$ gpg --card-status
gpg: selecting card failed: Operation not supported by device
gpg: OpenPGP card not available: Operation not supported by device

With the pcsctest tool, I get the following response… :thinking:

$ pcsctest

MUSCLE PC/SC Lite Test Program

Testing SCardEstablishContext    : Command successful.
Testing SCardGetStatusChange
Please insert a working reader   : Command successful.
Testing SCardListReaders         : Command successful.
Reader 01: Nitrokey Nitrokey Pro
Enter the reader number          : 01
Waiting for card insertion
                                 : Command successful.
Testing SCardConnect             : Card is unresponsive.
4

I’ve found some issues regarding non-functional smart card readers after upgrading to macOS Sonoma…

https://developer.apple.com/forums/thread/732091

https://iboysoft.com/howto/macos-sonoma-issues.html#usbsmart-card-reader-not-working-on-macos-sonoma

…but still no clue how to get the NitroKey up and running again :frowning:

5

Same here.
opensc-tool show the reader, but operations on the card always returns card unresponsive.

xxx@rocketeer:~ $ opensc-tool -l
# Detected readers (pcsc)
Nr.  Card  Features  Name
0    Yes             Nitrokey Nitrokey Pro
xxx@rocketeer:~ $ opensc-tool --list-algorithms
Using reader with a card: Nitrokey Nitrokey Pro
Failed to connect to card: Unresponsive card (correctly inserted?)
xxx@rocketeer:~ $
6

Same issue here, since upgrading to Sonoma, smart card does not seem to work anymore. Though I use NitroKey HMS, but same issue.

7

Same here, HSM 2, detected by Sonoma, but not available in OpenSC 0.23:

~❯ /Library/OpenSC/bin/pkcs11-tool --show-info
Cryptoki version 3.0
Manufacturer OpenSC Project
Library OpenSC smartcard framework (ver 0.23)
error: PKCS11 function C_GetSlotInfo failed: rv = CKR_DEVICE_ERROR (0x30)
Aborting.

8

I opened an issue with OpenSC: CKR_DEVICE_ERROR for Nitro HSM 2 on Sonoma · Issue #2887 · OpenSC/OpenSC · GitHub

1 Like
9

After quite some searching, I solved this and posted a solution which worked for me at this opened issue: CKR_DEVICE_ERROR for Nitro HSM 2 on Sonoma · Issue #2887 · OpenSC/OpenSC · GitHub
Hopefully it helps for others as well.

2 Likes
10

The comment from @metsma made it running again for me as well :+1:

1 Like