Unable to initialize new HSM2 key

Nitrokeys HSM
1

Hello:

I just received a new HSM2 key and am having an issue initializing it.
Currently using:
Raspberry Pi 4 2GB
Ubuntu: 24.04
opensc: 0.25.0~rc1-1build2
pcscd: 2.0.3-1build1

Here are the output of sc-hsm-tool and pkcs11-tool:

$ sudo sc-hsm-tool -vv --initialize --so-pin <REDACTED> --pin <REDACTED> --label "Step-CA"
No smart card readers found.
Failed to connect to card: Success
P:1438; T:0x281473312313376 13:41:18.996 [sc-hsm-tool] ctx.c:1066:sc_release_context: called

pkcs11-tool --module /usr/lib/aarch64-linux-gnu/opensc-pkcs11.so \
--init-token --init-pin --so-pin=<REDACTED> \
--new-pin=<REDACTED> --label="Step-CA" --pin=<REDACTED>
No slots.

The key is visible to the OS:

$ lsusb | grep "Nitrokey"
Bus 001 Device 006: ID 20a0:4230 Clay Logic Nitrokey HSM

What am I missing to initialize the NitroKey?

Thank you

2

Is pcscd running ?

You can diagnose the problem by starting pcscd in foreground mode with

/usr/sbin/pcscd -a -d -f

That should show the reader and card.

3

@sc-hsm: Thanks for the push in the right direction.
Once I validated that pcscd.service and pcscd.socket were running, I was able to initialize the card successfully.

Thanks, and have a great weekend!