Got my NK3 A NFC today - ordered as I saw PIV is supported with FW 1.8.x.
I tried to generate PIV keys - and for some reason it fails for slot 9C - while it works for slots 9A, 9D and 9E.
Failure on slot 9C:
[main@main nitrokey]$ cat /tmp/nitropy-20251111T155018-669zio7v.log
195 INFO pynitrokey.cli Timestamp: 2025-11-11 15:50:18.280301
195 INFO pynitrokey.cli OS: uname_result(system='Linux', node='main', release='6.17.7-arch1-1', version='#1 SMP PREEMPT_DYNAMIC Sun, 02 Nov 2025 17:27:22 +0000', machine='x86_64')
195 INFO pynitrokey.cli Python version: 3.13.7
195 INFO pynitrokey.cli Cli arguments: ['nk3', 'piv', '--experimental', 'generate-key', '--admin-key', '010203040506070801020304050607080102030405060708', '--pin', '[redacted]', '--key', '9C', '--algo', 'RSA2048', '--subject-name', 'CN=9C', '--path', '9c.csr']
198 INFO pynitrokey.cli pynitrokey version: 0.11.1
199 INFO pynitrokey.cli cryptography version: 46.0.3
199 INFO pynitrokey.cli fido2 version: 2.0.0
199 INFO pynitrokey.cli nethsm version: 2.0.0
200 INFO pynitrokey.cli nitrokey version: 0.4.1
200 INFO pynitrokey.cli pyusb version: 1.3.1
344 INFO pivapp Sending 135 '0087039b047c028000'
4278 INFO pivapp Received [610c]
4280 INFO pivapp Received [9000] 7c0a80084ec5a30c7d685bcc
4280 INFO pivapp Received final data: [9000] '7c0a80084ec5a30c7d685bcc'
4280 INFO pivapp Decoded received: 7c0a80084ec5a30c7d685bcc
4281 INFO pivapp Sending 135 '0087039b167c1480081d4af90e9993b54481081b38c7077e1213ff'
4343 INFO pivapp Received [610c]
4345 INFO pivapp Received [9000] 7c0a82086b28a0dde3602406
4345 INFO pivapp Received final data: [9000] '7c0a82086b28a0dde3602406'
4345 INFO pivapp Decoded received: 7c0a82086b28a0dde3602406
4345 INFO pivapp Sending 32 '0020008008313233343536ffff'
4509 INFO pivapp Received [9000]
4509 INFO pivapp Sending 71 '0047009c05ac03800107'
7217 INFO pivapp Received [6100]
7220 INFO pivapp Received [610f] 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
7220 INFO pivapp Got RemainingData status: [610f] '7f4982010981820100aa2b171647e4b6e6d9789bbf2c49bef6cb4200457c46de88ccd93733658d8fd330707bb9f18ed07c713b5642b58177bc9d990a0699258ab07f31e63d3b2805ebce8f3e10f2de5d48507ab29b3c59d7592e5547868663e63b245ea0764ae1c463277309205c082e211edfbc269fc89f79c2ca47375ae7cacc82cdff0a57cfb2f28ec74258225c508cc407ae53c684c4927643d3c68c68616bf624d8d3e8d672395b24939e3faf531f8b9872153c379f02e0e3b04abe36687c1d18b24e3a3763806794a929a7b2481cc4bd4714d1112e9b196c32d2d3e68f5850a691bb023352986515ff29bedbd4c430acb1e343780998439a3d1c7c4c'
7222 INFO pivapp Received [9000] 17e08d6050af134e83618203010001
7222 INFO pivapp Received final data: [9000] '7f4982010981820100aa2b171647e4b6e6d9789bbf2c49bef6cb4200457c46de88ccd93733658d8fd330707bb9f18ed07c713b5642b58177bc9d990a0699258ab07f31e63d3b2805ebce8f3e10f2de5d48507ab29b3c59d7592e5547868663e63b245ea0764ae1c463277309205c082e211edfbc269fc89f79c2ca47375ae7cacc82cdff0a57cfb2f28ec74258225c508cc407ae53c684c4927643d3c68c68616bf624d8d3e8d672395b24939e3faf531f8b9872153c379f02e0e3b04abe36687c1d18b24e3a3763806794a929a7b2481cc4bd4714d1112e9b196c32d2d3e68f5850a691bb023352986515ff29bedbd4c430acb1e343780998439a3d1c7c4c17e08d6050af134e83618203010001'
7222 INFO pivapp Decoded received: 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
7222 INFO pivapp Sending 135 '0087079c00010a7c820106818201000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff003031300d0609608648016503040201050004205991a9a1c89ca8baf7261d6a67104f7f6a46a03d7c6d9873294c5bb1bf1733b28200'
7226 INFO pivapp Received [6982]
7226 WARNING pynitrokey.cli An unhandled exception occurred
Traceback (most recent call last):
File "/usr/lib/python3.13/site-packages/pynitrokey/cli/__init__.py", line 141, in main
nitropy()
~~~~~~~^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1442, in __call__
return self.main(*args, **kwargs)
~~~~~~~~~^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1363, in main
rv = self.invoke(ctx)
File "/usr/lib/python3.13/site-packages/click/core.py", line 1830, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1830, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1830, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1226, in invoke
return ctx.invoke(self.callback, **ctx.params)
~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 794, in invoke
return callback(*args, **kwargs)
File "/usr/lib/python3.13/site-packages/pynitrokey/cli/nk3/piv.py", line 608, in generate_key
csr = csr_builder.sign(
RsaPivSigner(device, key_ref, public_key_rsa), hashes.SHA256()
)
File "/usr/lib/python3.13/site-packages/cryptography/x509/base.py", line 354, in sign
return rust_x509.create_x509_csr(
~~~~~~~~~~~~~~~~~~~~~~~~~^
self,
^^^^^
...<3 lines>...
ecdsa_deterministic,
^^^^^^^^^^^^^^^^^^^^
)
^
File "/usr/lib/python3.13/site-packages/pynitrokey/cli/nk3/piv.py", line 58, in sign
return self._device.sign_rsa2048(data, self._key_reference)
~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 307, in sign_rsa2048
return self.raw_sign(payload, key, 0x07)
~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 311, in raw_sign
result = self.send_receive(0x87, algo, key, body)
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 115, in send_receive
return self._send_receive_inner(bytes_data, log_info=f"{ins}")
~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 159, in _send_receive_inner
raise StatusError(int.from_bytes(status_bytes, byteorder="big"))
pynitrokey.nk3.piv_app.StatusError: 0x6982
7228 DEBUG root print: Critical error:
7228 DEBUG root print: An unhandled exception occurred
7228 ERROR root 0x6982
Traceback (most recent call last):
File "/usr/lib/python3.13/site-packages/pynitrokey/cli/__init__.py", line 141, in main
nitropy()
~~~~~~~^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1442, in __call__
return self.main(*args, **kwargs)
~~~~~~~~~^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1363, in main
rv = self.invoke(ctx)
File "/usr/lib/python3.13/site-packages/click/core.py", line 1830, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1830, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1830, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1226, in invoke
return ctx.invoke(self.callback, **ctx.params)
~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 794, in invoke
return callback(*args, **kwargs)
File "/usr/lib/python3.13/site-packages/pynitrokey/cli/nk3/piv.py", line 608, in generate_key
csr = csr_builder.sign(
RsaPivSigner(device, key_ref, public_key_rsa), hashes.SHA256()
)
File "/usr/lib/python3.13/site-packages/cryptography/x509/base.py", line 354, in sign
return rust_x509.create_x509_csr(
~~~~~~~~~~~~~~~~~~~~~~~~~^
self,
^^^^^
...<3 lines>...
ecdsa_deterministic,
^^^^^^^^^^^^^^^^^^^^
)
^
File "/usr/lib/python3.13/site-packages/pynitrokey/cli/nk3/piv.py", line 58, in sign
return self._device.sign_rsa2048(data, self._key_reference)
~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 307, in sign_rsa2048
return self.raw_sign(payload, key, 0x07)
~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 311, in raw_sign
result = self.send_receive(0x87, algo, key, body)
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 115, in send_receive
return self._send_receive_inner(bytes_data, log_info=f"{ins}")
~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 159, in _send_receive_inner
raise StatusError(int.from_bytes(status_bytes, byteorder="big"))
pynitrokey.nk3.piv_app.StatusError: 0x6982
7230 DEBUG root listing all connected devices:
//HID 1,2,3 cut as the same "permission error" as for 0 - as the NK is 4 and the other devices are not nitrokeys
7286 DEBUG fido2.hid.linux Failed opening device /dev/hidraw0
Traceback (most recent call last):
File "/usr/lib/python3.13/site-packages/pynitrokey/cli/__init__.py", line 141, in main
nitropy()
~~~~~~~^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1442, in __call__
return self.main(*args, **kwargs)
~~~~~~~~~^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1363, in main
rv = self.invoke(ctx)
File "/usr/lib/python3.13/site-packages/click/core.py", line 1830, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1830, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1830, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 1226, in invoke
return ctx.invoke(self.callback, **ctx.params)
~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/click/core.py", line 794, in invoke
return callback(*args, **kwargs)
File "/usr/lib/python3.13/site-packages/pynitrokey/cli/nk3/piv.py", line 608, in generate_key
csr = csr_builder.sign(
RsaPivSigner(device, key_ref, public_key_rsa), hashes.SHA256()
)
File "/usr/lib/python3.13/site-packages/cryptography/x509/base.py", line 354, in sign
return rust_x509.create_x509_csr(
~~~~~~~~~~~~~~~~~~~~~~~~~^
self,
^^^^^
...<3 lines>...
ecdsa_deterministic,
^^^^^^^^^^^^^^^^^^^^
)
^
File "/usr/lib/python3.13/site-packages/pynitrokey/cli/nk3/piv.py", line 58, in sign
return self._device.sign_rsa2048(data, self._key_reference)
~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 307, in sign_rsa2048
return self.raw_sign(payload, key, 0x07)
~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 311, in raw_sign
result = self.send_receive(0x87, algo, key, body)
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 115, in send_receive
return self._send_receive_inner(bytes_data, log_info=f"{ins}")
~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/site-packages/pynitrokey/nk3/piv_app.py", line 159, in _send_receive_inner
raise StatusError(int.from_bytes(status_bytes, byteorder="big"))
pynitrokey.nk3.piv_app.StatusError: 0x6982
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/usr/lib/python3.13/site-packages/fido2/hid/linux.py", line 96, in list_descriptors
devices.append(get_descriptor(hidraw))
~~~~~~~~~~~~~~^^^^^^^^
File "/usr/lib/python3.13/site-packages/fido2/hid/linux.py", line 53, in get_descriptor
with open(path, "rb") as f:
~~~~^^^^^^^^^^^^
PermissionError: [Errno 13] Permission denied: '/dev/hidraw0'
7343 DEBUG root :: 'Nitrokey FIDO2' keys
7343 DEBUG root :: 'Nitrokey Start' keys:
7357 DEBUG root :: 'NK3' keys
7379 DEBUG root /dev/hidraw4: Nitrokey 3 B5F0CAC637D8DA5CB5FC8FEE85CD8342
7379 DEBUG root :: 'NKPK' keys
7383 DEBUG root print: --------------------------------------------------------------------------------
7383 DEBUG root print: Critical error occurred, exiting now
7383 DEBUG root print: Unexpected? Is this a bug? Would you like to get support/help?
7383 DEBUG root print: - You can report issues at: https://support.nitrokey.com/
7383 DEBUG root print: - Writing an e-mail to support@nitrokey.com is also possible
7383 DEBUG root print: - Please attach the log: '/tmp/nitropy-20251111T155018-669zio7v.log' with any support/help request!
7383 DEBUG root print: - Please check if you have udev rules installed: https://docs.nitrokey.com/nitrokeys/nitrokey3/firmware-update#troubleshooting-linux
[main@main nitrokey]$
Success on slots 9A:
[main@main nitrokey]$ cat /tmp/nitropy-20251111T160656-foi3lfct.log
195 INFO pynitrokey.cli Timestamp: 2025-11-11 16:06:56.530264
195 INFO pynitrokey.cli OS: uname_result(system='Linux', node='main', release='6.17.7-arch1-1', version='#1 SMP PREEMPT_DYNAMIC Sun, 02 Nov 2025 17:27:22 +0000', machine='x86_64')
195 INFO pynitrokey.cli Python version: 3.13.7
195 INFO pynitrokey.cli Cli arguments: ['nk3', 'piv', '--experimental', 'generate-key', '--admin-key', '010203040506070801020304050607080102030405060708', '--pin', '[redacted]', '--key', '9A', '--algo', 'RSA2048', '--subject-name', 'CN=9A', '--path', '9a.csr']
198 INFO pynitrokey.cli pynitrokey version: 0.11.1
199 INFO pynitrokey.cli cryptography version: 46.0.3
199 INFO pynitrokey.cli fido2 version: 2.0.0
199 INFO pynitrokey.cli nethsm version: 2.0.0
200 INFO pynitrokey.cli nitrokey version: 0.4.1
200 INFO pynitrokey.cli pyusb version: 1.3.1
352 INFO pivapp Sending 135 '0087039b047c028000'
431 INFO pivapp Received [610c]
432 INFO pivapp Received [9000] 7c0a8008d05cbfe4f8671d3c
432 INFO pivapp Received final data: [9000] '7c0a8008d05cbfe4f8671d3c'
432 INFO pivapp Decoded received: 7c0a8008d05cbfe4f8671d3c
433 INFO pivapp Sending 135 '0087039b167c1480088e8fded18d5459cd8108fde76403d2af04b3'
496 INFO pivapp Received [610c]
497 INFO pivapp Received [9000] 7c0a8208106897fa4b0d013e
497 INFO pivapp Received final data: [9000] '7c0a8208106897fa4b0d013e'
497 INFO pivapp Decoded received: 7c0a8208106897fa4b0d013e
497 INFO pivapp Sending 32 '0020008008313233343536ffff'
669 INFO pivapp Received [9000]
669 INFO pivapp Sending 71 '0047009a05ac03800107'
6657 INFO pivapp Received [6100]
6660 INFO pivapp Received [610f] 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
6660 INFO pivapp Got RemainingData status: [610f] '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'
6661 INFO pivapp Received [9000] 75a541e4367ecd9961ad8203010001
6661 INFO pivapp Received final data: [9000] '7f49820109818201008da64f08713705a123e5066ffe1b3722189fd34c65012c5935cbb201b7c8b4e7adb70e7f2d60badb9a1017d20852410f86314a48c0255fcd9e91ecf3bce0954acf90c07aec0bb5d50e35108d52657062d1a27d7eafd7309c46d9fdc2700b5c36929fd46f44660e1aee80f11db64a3760409c14ed529a87ffe0ae432a2238aea1d2d1482a5d974e7cf6a99f296b483d121d49762d938ae1ee1047073a47a78bc21084ced29a4ca556fd8456ac4fff3fe9d5008b553a8b917369ca83cf0758fa3293b231d277575b2de3ff967db17b05c803a922db4878816f0fca0d93b46c78b2ebae4d7c85b3f027864d12857d9163493f4c9d5e9a5975a541e4367ecd9961ad8203010001'
6661 INFO pivapp Decoded received: 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
6662 INFO pivapp Sending 135 '0087079a00010a7c820106818201000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff003031300d060960864801650304020105000420353dc8f1e31fa9b7f79f41a71e3118c57593dc503f7992e34572a4ce4bce73488200'
7535 INFO pivapp Received [6100]
7539 INFO pivapp Received [6109] 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
7539 INFO pivapp Got RemainingData status: [6109] '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'
7540 INFO pivapp Received [9000] ac0d5a9c33b7e83d5e
7540 INFO pivapp Received final data: [9000] '7c8201048282010022d439146ee496e9f3c93f2a3c44d44604a48387cb25fe22d33cea27d8cc586ea2c779a467dfd135169f7bab0dccbff545add720e51d4455d93b4329d54132486afca42a8b75cf6f787d1cd5bc16a1c468868c7e090202da20846688fc60abe7a8f502bf247ee8ae15db55c546e7f3a9460df9415328b4f34c2e1fca81433bac30de15246a954b20e877541131eb38f93c68f4a1a6ef0be3d6076bffaff90d65c1d5a027aa63a4407c19866b5233eaedf0b578e64887c5a15ad8a2f00b440401deee85eaddf7c9229bf23a1a4d95c8eee423f02980b916a81218aeb0550ad95accc30c2ec0439973ca664fbbedd4801039dfe131947b59ac0d5a9c33b7e83d5e'
7540 INFO pivapp Decoded received: 7c8201048282010022d439146ee496e9f3c93f2a3c44d44604a48387cb25fe22d33cea27d8cc586ea2c779a467dfd135169f7bab0dccbff545add720e51d4455d93b4329d54132486afca42a8b75cf6f787d1cd5bc16a1c468868c7e090202da20846688fc60abe7a8f502bf247ee8ae15db55c546e7f3a9460df9415328b4f34c2e1fca81433bac30de15246a954b20e877541131eb38f93c68f4a1a6ef0be3d6076bffaff90d65c1d5a027aa63a4407c19866b5233eaedf0b578e64887c5a15ad8a2f00b440401deee85eaddf7c9229bf23a1a4d95c8eee423f02980b916a81218aeb0550ad95accc30c2ec0439973ca664fbbedd4801039dfe131947b59ac0d5a9c33b7e83d5e
7540 INFO pivapp Sending 135 '0087079a00010a7c820106818201000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff003031300d060960864801650304020105000420e1a1830fa270d564da4a985661883b0d159917db6a3cda6d0a57bbe14bcc7e328200'
8300 INFO pivapp Received [6100]
8303 INFO pivapp Received [6109] 7c82010482820100228264b64bf1e22c5b889ce3353eae3ec631dc33d157453e2a06a4b97d5cbe052db548eda91c0584b0a3a6468a6b5efdb56f1017787a84d84ba2e151e6e9e20dbcce02086eac2af7f0cad3ecd155b9cb3c9dc3d3c3a6c72b6ebacd5f5d951cad53bc936630d1950d3236c891d10e4f125daefb69dbb2828bf131edb6260193da333db3fba91b90a8f21d9bbb9ef3e080bc27206cefd7ee116e434d2a8ea0a16994e06f6d9ab291526aa3612722aa4416df866e7d60c6baa74c81d9a312890e024080719e353b45e28cefcb080088c7e423cdb53033067ba88be9220772abece808dae6a65884dd21115af31f5ba9bb49a320f4e2cd8b7f
8303 INFO pivapp Got RemainingData status: [6109] '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'
8305 INFO pivapp Received [9000] ae39546422b3831716
8305 INFO pivapp Received final data: [9000] '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'
8305 INFO pivapp Decoded received: 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
8305 INFO pivapp Sending 219 '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'
8660 INFO pivapp Received [9000]
[main@main nitrokey]$
This hints towards a firmware issue as the nitropy cli sends the data correctly. Is this on design? Or went something wrong for slot 9C?
I’ve seen on github that you copy a lot from Yubi - so: Do Yubi-specific vendor extensions work, like moving keys between slots (from active to retired)?
Just for fun I even tried slot 82 and it worked.
So for some reason there’s something specific to slot 9C - or my NK3 arrived dead on arrival.