OpenPGP card not working

Nitrokeys
1

Hello,

Recently, I bought a Nitrokey Storage. I did so, amongst other reasons, because of its OpenPGP card support, but I don’t manage to get it working:

markus@haktar % gpg --card-status
gpg: error getting version from ‘scdaemon’: Not supported
gpg: OpenPGP card not available: Not supported

Unfortunately, the troubleshooting on your homepage doesn’t help me:
https://www.nitrokey.com/documentation/frequently-asked-questions#openpgp-card-not-available
Neither did the forum posts from other users with the same error help.

2 markus@haktar % ps ax | grep keyring
1491 ? Sl 0:00 /usr/bin/gnome-keyring-daemon --daemonize --login
1923 ? Sl 0:00 /usr/bin/gnome-keyring-daemon --start --foreground --components=secrets

markus@haktar % pkill -f gnome-keyring-daemon

markus@haktar % ps ax | grep keyring
19454 pts/2 S+ 0:00 grep --color=auto keyring

2 markus@haktar % gpg --card-status
gpg: error getting version from ‘scdaemon’: Not supported
gpg: OpenPGP card not available: Not supported

So, that’s not enough. I have the scdaemon installed:
markus@haktar % dpkg -l *scdaemon*
ii scdaemon 2.1.18-8 amd64 GNU privacy guard - smart card support

But it seems, it is not loaded:

markus@haktar % ps ax | grep [s]cd # nothing found

lsusb lists it:
markus@haktar % lsusb | grep 4109
Bus 002 Device 009: ID 20a0:4109 Clay Log

markus@haktar % grep 4109 /lib/udev/rules.d/60-scdaemon.rules
ATTR{idVendor}==“20a0”, ATTR{idProduct}==“4109”, ENV{ID_SMARTCARD_READER}=“1”, ENV{ID_SMARTCARD_READER_DRIVER}=“gnupg”

I have no idea what’s wrong - please help me.

markus@haktar % gpg --version
gpg (GnuPG) 2.1.18
libgcrypt 1.7.8

P.S. : I almost forgot: It’s an up to date debian testing.

2

I suppose that debian does use systemd?
Try to run this from a terminal as root:

% systemctl start pcscd.socket
% systemctl start pcscd.service
% systemctl enable pcscd.socket
% systemctl enable pcscd.service

% pcsc_scan
or of course gpg --card-status should give now a positive result.

3

As it turned out, I had one ugly line in my configuration:

% rgrep scd ~/.gnupg
/home/markus/.gnupg/gpg-agent.conf:disable-scdaemon

But removing that line wasn’t enough. I had to create that file:

% cat scdaemon.conf
pcsc-driver /usr/lib/x86_64-linux-gnu/libpcsclite.so.1
card-timeout 5
disable-ccid

Only after that, it worked…

1 Like