Installation of smart card reader and smart card drivers in Linux: Разлика между версии

От Infonotary
Направо към навигацията Направо към търсенето
Редакция без резюме
 
(Не са показани 10 междинни версии от 2 потребители)
Ред 1: Ред 1:
== Installing the driver for the reader ==
'''This page is not available!'''
 
<!--== Installing the driver for the reader ==


All readers, offered by InfoNotary EAD have drivers for Linux, which can be downloaded from the website of the manufacturer's - [http://www.hidglobal.com/drivers?field_brand_tid=24&product_id=3944&os=All OmniKey] or [http://www.acs.com.hk/index.php?pid=drivers&id=ACR38T ACS]. In some cases, these drivers can be installed directly through the packaging system of your distribution.
All readers, offered by InfoNotary EAD have drivers for Linux, which can be downloaded from the website of the manufacturer's - [http://www.hidglobal.com/drivers?field_brand_tid=24&product_id=3944&os=All OmniKey] or [http://www.acs.com.hk/index.php?pid=drivers&id=ACR38T ACS]. In some cases, these drivers can be installed directly through the packaging system of your distribution.
Ред 6: Ред 8:
Regardless of the model of your reader, you will need to install the package'' 'pcscd'''. This is the daemon through which programs work with the reader and smart card respectively. After installation of the new driver for the reader must restart pcscd. If you install drivers from the package, it will probably restart daemon.
Regardless of the model of your reader, you will need to install the package'' 'pcscd'''. This is the daemon through which programs work with the reader and smart card respectively. After installation of the new driver for the reader must restart pcscd. If you install drivers from the package, it will probably restart daemon.


[[Image:warning.jpg|32px]] In some distributions, together with the installation of pcscd installed and alternate demon Management readers -'' 'openct'''. For correct operation of the reader will have to deinstalrate or if it can not be done without removing and pcscd, forbid him to run.
[[Image:WarningYellow.png|32px]] In some distributions, together with the installation of pcscd installed and alternate demon Management readers -'' 'openct'''. For correct operation of the reader will have to deinstalrate or if it can not be done without removing and pcscd, forbid him to run.
<!--
 
You can check whether pcscd working with the command {{Шаблон:Console|ps ax &#124; grep pcscd &#124; grep -v "grep pcscd"}}, released from the terminal. Should display something like this: {{Шаблон:ConsoleOutput|3446 ?        Ssl    0:01 /usr/sbin/pcscd}}
If it shows nothing, so the demon does not work.
-->


=== Types of readers ===
=== Types of readers ===
Ред 50: Ред 49:


===== Remove libccid =====
===== Remove libccid =====
In most distributions with pcscd installed and free driver libccid. It does not work correctly with these readers, so if you use a reader that works only through libccid, uninstall it. In order not to remove the demon when uninstalling libccid, you can install any other package providing pcsc-ifd-handler - for example libacr38u. The exact command for Ubuntu is {{Template: Console | sudo apt-get install libacr38u && sudo apt-get remove libccid}}.
In some distributions free reader driver libccid is installed with pcscd. It does not work correctly with these readers, so if you don't use a reader that works only through libccid, uninstall it. In order not to remove the demon when uninstalling libccid, you can install any other package providing pcsc-ifd-handler - for example libacr38u. The exact command for Ubuntu is {{Template: Console | sudo apt-get install libacr38u && sudo apt-get remove libccid}}.


If the distribution you use, you can not remove libccid, without removing pcscd, you will need to remove or disable the driver manually. This is the situation with Red Hat, Fedora and their based distributions.
If in the distribution you use, you can not remove libccid, without removing pcscd, you will need to remove or disable the driver manually. This is the situation with some versions of Red Hat, Fedora and their derivate distributions.


More destructive option is to simply delete the driver from the folder pcscd. In Fedora it is /usr/lib/pcsc/drivers/ifd-ccid.bundle or /usr/lib64/pcsc/drivers/ifd-ccid.bundle in x86_64 version. With the following command you can move it to the home folder - {{Шаблон:Console|H&#61;$HOME; sudo mv /usr/lib/pcsc/drivers/ifd-ccid.bundle $H}}.
More destructive option is to simply delete the driver from the pcscd folder. In Fedora it is /usr/lib/pcsc/drivers/ifd-ccid.bundle or /usr/lib64/pcsc/drivers/ifd-ccid.bundle in x86_64 version. With the following command you can move it to the home folder - {{Шаблон:Console|H&#61;$HOME; sudo mv /usr/lib/pcsc/drivers/ifd-ccid.bundle $H}}.
In case you want to use another reader who works only through libccid, can not uninstall it. In this case you need to remove the description of the reader OmniKey of configuration file libccid - /usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist. The easiest way to do this is to replace the section ifdProductID strings 0x6622 and 0x3021 to 0x0000. The first is for CardMan 6121 and the second for CardMan 3x21. If so disable libccid, note that the next time you update the changes in its configuration file will be lost.
In case you want to use another reader that works only through libccid, you can not uninstall it. Instead you need to remove the description of the OmniKey readers from libccid configuration file - /usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist. The easiest way to do this is to replace every occurrence of the string 0x076B with 0xFFFF. If you disable libccid this way, note that the changes in its configuration file will be lost after update.


===== Testing Installation =====
===== Testing Installation =====
Ред 74: Ред 73:
For this readers lsusb the result is:<pre>ID 072f:90cc Advanced Card Systems, Ltd ACR38 SmartCard Reader</pre>
For this readers lsusb the result is:<pre>ID 072f:90cc Advanced Card Systems, Ltd ACR38 SmartCard Reader</pre>


== Installing the drivers for the smart card ==
== Installing smart card drivers ==
 
[[Image:WarningYellow.png|32px]] According to what is the model of your card, you have to use different software. If the model of the card is „'''T&S DS/2048 (L)'''“, you have to install '''bit4id-ipki''' from folder  Install/Linux on CD or from [[Use repositories of InfoNotary | our repository]]. If the model is „'''CardOS V4.3B (C)'''“, you will have to install OpenSC.
 
To check smart card model you can use pcsc_scan. This program shows what reader and cards are plugged. In Debian and Ubuntu it is contained in package '''pcsc-tools'''. If it shows '''Siemens CardOS V4.3B''', you must use OpenSC. If it says '''Universita' Degli Studi di Torino (Infocert)''', you must use bit4id-ipki.
 
[[Image:WarningYellow.png|32px]] OpenSC 0.16 and later versions expect reader driver to provide information for hardware capabilities contrary to the PC / SC standard. If you are using OpenSC with OmniKey reader you must set maximum message size manually in configuration file. In section reader_driver pcsc you must uncomment max_send_size and max_recv_size and set bot variables to at least 300 bytes:
 
    reader_driver pcsc {
        max_send_size = 1024;
        max_recv_size = 1024;
 
More information is available in [https://github.com/OpenSC/OpenSC/issues/802 OpenSC issue] and relevant part of [http://pcscworkgroup.com/Download/Specifications/pcsc10_v2.02.09.pdf PC/SC specification].
 
== Installation check ==
 
If you have problem using your certificate, you can run the following program to identify it:
 
* [http://repository.infonotary.com/install/sysinfo/SystemInfo.tar.gz Installation test for Linux]


[[Image:warning.jpg|32px]] According to what is the model of your card, you have to use different software. If the model of the card is „'''T&S DS/2048 (L)'''“, you have to install '''bit4id-ipki''' from folder  Install/Linux on CD or from [[Installation of smart card reader and smart card drivers in Linux]]. If the model is „'''CardOS V4.3B (C)'''“, you will have to install OpenSC and configure it, as it is described in the next chapter.
It can send information directly to us. After report is accepted, it will show nine digit number, that can be used by our support team to see test result. If you do not have Internet connection or direct sending failed, you can save report and send it to [mailto:support@infonotary.com support@infonotary.com].


In order to define your smart card model:
Reader and card should be connected to the computer when test program is started.


* Through pcsc_scan. This program shows what reader and cards are plugged. In Debian and Ubuntu she is contained in package '''pcsc-tools'''. If it shows '''Siemens CardOS V4.3B''', you must use OpenSC. If it says '''Universita' Degli Studi di Torino (Infocert)''', you must use bit4id-ipki.
This program uses one of following packages to show its user interface - python-tk for Debian/Ubuntu, tkinter for Fedora/RedHat or zenity. If you do not have any of them installed, it will still work, but only from terminal.-->

Текуща версия към 10:25, 22 юни 2022

This page is not available!