Installation of smart card reader and smart card drivers in Linux: Разлика между версии

От Infonotary
Направо към навигацията Направо към търсенето
Редакция без резюме
Редакция без резюме
 
(Не са показани 19 междинни версии от 3 потребители)
Ред 1: Ред 1:
== Installing the driver for the reader ==
'''This page is not available!'''


All readers, offered by InfoNotary EAD have drivers for Linux, which can be downloaded from the website of the manufacturer's - [http://forms.hidglobal.com/driverDownloads.php?techCat=19&prod_id=182 OmniKey] or [http://www.acs.com.hk/index.php?pid=drivers&id=ACR38T ACS]. In some cases, these drivers can be installed directly through the packaging system of your distribution.
<!--== Installing the driver for the reader ==
 
All readers, offered by InfoNotary EAD have drivers for Linux, which can be downloaded from the website of the manufacturer's - [http://www.hidglobal.com/drivers?field_brand_tid=24&product_id=3944&os=All OmniKey] or [http://www.acs.com.hk/index.php?pid=drivers&id=ACR38T ACS]. In some cases, these drivers can be installed directly through the packaging system of your distribution.


=== Installation of PC / SC ===
=== Installation of PC / SC ===
Regardless of the model of your reader, you will need to install the package'' 'pcscd'''. This is the daemon through which programs work with the reader and smart card respectively. After installation of the new driver for the reader must restart pcscd. If you install drivers from the package, it will probably restart daemon.
Regardless of the model of your reader, you will need to install the package'' 'pcscd'''. This is the daemon through which programs work with the reader and smart card respectively. After installation of the new driver for the reader must restart pcscd. If you install drivers from the package, it will probably restart daemon.


[[Image:warning.jpg|32px]] In some distributions, together with the installation of pcscd installed and alternate demon Management readers -'' 'openct'''. For correct operation of the reader will have to deinstalrate or if it can not be done without removing and pcscd, forbid him to run.
[[Image:WarningYellow.png|32px]] In some distributions, together with the installation of pcscd installed and alternate demon Management readers -'' 'openct'''. For correct operation of the reader will have to deinstalrate or if it can not be done without removing and pcscd, forbid him to run.
<!--
 
You can check whether pcscd working with the command {{Шаблон:Console|ps ax &#124; grep pcscd &#124; grep -v "grep pcscd"}}, released from the terminal. Should display something like this: {{Шаблон:ConsoleOutput|3446 ?        Ssl    0:01 /usr/sbin/pcscd}}
If it shows nothing, so the demon does not work.
-->


=== Types of readers ===
=== Types of readers ===
Ред 18: Ред 17:
[[Картинка:CardMan6121.gif]][[Картинка:CardMan3021.png]]
[[Картинка:CardMan6121.gif]][[Картинка:CardMan3021.png]]


To best use smart card readers on OmniKey Linux, you will need to install the official driver OmniKey instead included in most distributions libccid. You can now download it from [http://forms.hidglobal.com/driverDownloads.php?techCat=19&prod_id=182 their site] or from [[Reader drivers]].Before you install the driver must have installed'' 'pcscd''' and you uninstalled or disabled'' 'openct'''.
To use smart card readers on OmniKey Linux, you will need to install the official driver OmniKey instead of libccid that is included in most distributions.
 
If you use Debian, Ubuntu or Mint you can install it directly from our [[Use repositories of InfoNotary#For distributions that use APT | apt repository]]. Package name is pcsc-omnikey. After this package is installed you can proceed directly to [[#Installing the drivers for the smart card | installation of smart card driver]].
 
If you use different distribution or prefer to install driver manually, you can now download it from [http://www.hidglobal.com/drivers?field_brand_tid=24&product_id=3944&os=All their site] or from [[Reader drivers]]. Before you install the driver must have installed'' 'pcscd''' and you uninstalled or disabled'' 'openct'''.


At the output of the command lsusb these readers appear in the following ways:
At the output of the command lsusb these readers appear in the following ways:
Ред 29: Ред 32:
HID Global did not provide standard installation packages for Linux, so to install the driver must take the following steps:
HID Global did not provide standard installation packages for Linux, so to install the driver must take the following steps:
#Unzip the downloaded tar.gz package in your home folder. This is the folder with your user name.
#Unzip the downloaded tar.gz package in your home folder. This is the folder with your user name.
#Open a terminal and change the working folder to that obtained decompressing. 64 bit version is komadata {{Шаблон:Console|cd ~/ifdokccid_lnx_x64-3.7.0}}, and for 32 bit is {{Шаблон:Console|cd ~/ifdokccid_lnx_i686-3.7.0}}. In case you unzip it to another folder, you can type in the terminal "cd", to grab the folder from the file manager and to drag and drop on the terminal. This will give you the correct command.
#Open a terminal and change the working folder to that obtained decompressing. 64 bit version is the command {{Шаблон:Console|cd ~/ifdokccid_linux_x86_64-v4.1.5}}, and for 32 bit is {{Шаблон:Console|cd ~/ifdokccid_linux_i686-v4.1.5}}. In case you unzip it to another folder, you can type in the terminal "cd", to grab the folder from the file manager and to drag and drop on the terminal. This will give you the correct command.
#Run the command {{Шаблон:Console|sudo ./install}} to install or {{Шаблон:Console|su -c ./install if you dont use sudo}}.
#Run the command {{Шаблон:Console|sudo ./install}} to install or {{Шаблон:Console|su -c ./install}} if you dont use sudo.
#Restart the daemon with the command {{Шаблон:Console|sudo service pcscd restart}}.
#Restart the daemon with the command {{Шаблон:Console|sudo service pcscd restart}}.


===== Setting up pcscd to run the system =====
===== Setting up pcscd to run the system =====
If you are using Ubuntu 11.04, 11.10 or 04.12 will need to set pcscd to run with the system. If you use another distribution or version of Ubuntu skip to the next section - [[# Remove libccid | remove libccid]]. In these versions of Ubuntu daemon is configured to run as a normal user, but the driver of HID Global can not work that way. This is done by changing the init script pcscd (/ etc / init.d / pcscd). You can open this file with the command {{Template: Console | sudo gedit / etc / init.d / pcscd}}. You can find this section:
If you are using Ubuntu 11.04, 11.10 or 04.12 will need to set pcscd to run with the system. If you use another distribution or version of Ubuntu skip to the next section - [[# Remove libccid | remove libccid]]. In these versions of Ubuntu daemon is configured to run as a normal user, but the driver of HID Global can not work that way. This is done by changing the init script pcscd (/etc/init.d/pcscd). You can open this file with the command {{Template: Console | sudo gedit /etc/init.d/pcscd}}. You can find this section:
<pre># DO NOT start the daemon on startup
<pre># DO NOT start the daemon on startup
# comment the line to have the same behavior as in version < 1.6.0
# comment the line to have the same behavior as in version < 1.6.0
Ред 46: Ред 49:


===== Remove libccid =====
===== Remove libccid =====
In most distributions with pcscd installed and free driver libccid. It does not work correctly with these readers, so if you use a reader that works only through libccid, uninstall it. In order not to remove the demon when uninstalling libccid, you can install any other package providing pcsc-ifd-handler - for example libacr38u. The exact command for Ubuntu is {{Template: Console | sudo apt-get install libacr38u && sudo apt-get remove libccid}}.
In some distributions free reader driver libccid is installed with pcscd. It does not work correctly with these readers, so if you don't use a reader that works only through libccid, uninstall it. In order not to remove the demon when uninstalling libccid, you can install any other package providing pcsc-ifd-handler - for example libacr38u. The exact command for Ubuntu is {{Template: Console | sudo apt-get install libacr38u && sudo apt-get remove libccid}}.


If the distribution you use, you can not remove libccid, without removing pcscd, you will need to remove or disable the driver manually. This is the situation with Red Hat, Fedora and their based distributions.
If in the distribution you use, you can not remove libccid, without removing pcscd, you will need to remove or disable the driver manually. This is the situation with some versions of Red Hat, Fedora and their derivate distributions.


More destructive option is to simply delete the driver from the folder pcscd. In Fedora it is / usr / lib / pcsc / drivers / ifd-ccid.bundle or / usr/lib64/pcsc/drivers/ifd-ccid.bundle in x86_64 version. With the following command you can move it to the home folder - {{Template: Console | H = $ HOME; sudo mv / usr / lib / pcsc / drivers / ifd-ccid.bundle $ H}}.
More destructive option is to simply delete the driver from the pcscd folder. In Fedora it is /usr/lib/pcsc/drivers/ifd-ccid.bundle or /usr/lib64/pcsc/drivers/ifd-ccid.bundle in x86_64 version. With the following command you can move it to the home folder - {{Шаблон:Console|H&#61;$HOME; sudo mv /usr/lib/pcsc/drivers/ifd-ccid.bundle $H}}.
 
In case you want to use another reader that works only through libccid, you can not uninstall it. Instead you need to remove the description of the OmniKey readers from libccid configuration file - /usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist. The easiest way to do this is to replace every occurrence of the string 0x076B with 0xFFFF. If you disable libccid this way, note that the changes in its configuration file will be lost after update.
In case you want to use another reader who works only through libccid, can not uninstall it. In this case you need to remove the description of the reader OmniKey of configuration file libccid - / usr / lib / pcsc / drivers / ifd-ccid.bundle / Contents / Info.plist. The easiest way to do this is to replace the section ifdProductID strings 0x6622 and 0x3021 to 0x0000. The first is for CardMan 6121 and the second for CardMan 3x21. If so disable libccid, note that the next time you update the changes in its configuration file will be lost.


===== Testing Installation =====
===== Testing Installation =====
To check which one driver using pcscd, you need to run in debug mode with parameters-fd. For example, on Ubuntu this can be done this way - {{Template: Console | sudo / usr / sbin / pcscd-f}}. In the output of this command should have something like this:
To check which one driver using pcscd, you need to run in debug mode with parameters-fd. For example, on Ubuntu this can be done this way - {{Template: Console | sudo /usr/sbin/pcscd -f}}. In the output of this command should have something like this:
{{Шаблон:ConsoleOutput|{{Color|'''HID'''|#FFFFFF|#5588FF}} HID Global OMNIKEY CCID  IA32 v3.7.0 eusupport@hidglobal.com}}
{{Шаблон:ConsoleOutput|{{Color|'''HID'''|#FFFFFF|#5588FF}} HID Global OMNIKEY CCID  IA32 v3.7.0 eusupport@hidglobal.com}}
If this sign is not show than the driver of Omnikey is not loaded. Most likely reason for this is that you have installed some of the following libccid or openct. In most cases when you delete this packages the problem is fixed.
If this sign is not show than the driver of Omnikey is not loaded. Most likely reason for this is that you have installed some of the following libccid or openct. In most cases when you delete this packages the problem is fixed.
Ред 71: Ред 73:
For this readers lsusb the result is:<pre>ID 072f:90cc Advanced Card Systems, Ltd ACR38 SmartCard Reader</pre>
For this readers lsusb the result is:<pre>ID 072f:90cc Advanced Card Systems, Ltd ACR38 SmartCard Reader</pre>


== Installing the drivers for the smart card ==
== Installing smart card drivers ==
 
[[Image:WarningYellow.png|32px]] According to what is the model of your card, you have to use different software. If the model of the card is „'''T&S DS/2048 (L)'''“, you have to install '''bit4id-ipki''' from folder  Install/Linux on CD or from [[Use repositories of InfoNotary | our repository]]. If the model is „'''CardOS V4.3B (C)'''“, you will have to install OpenSC.
 
To check smart card model you can use pcsc_scan. This program shows what reader and cards are plugged. In Debian and Ubuntu it is contained in package '''pcsc-tools'''. If it shows '''Siemens CardOS V4.3B''', you must use OpenSC. If it says '''Universita' Degli Studi di Torino (Infocert)''', you must use bit4id-ipki.
 
[[Image:WarningYellow.png|32px]] OpenSC 0.16 and later versions expect reader driver to provide information for hardware capabilities contrary to the PC / SC standard. If you are using OpenSC with OmniKey reader you must set maximum message size manually in configuration file. In section reader_driver pcsc you must uncomment max_send_size and max_recv_size and set bot variables to at least 300 bytes:
 
    reader_driver pcsc {
        max_send_size = 1024;
        max_recv_size = 1024;
 
More information is available in [https://github.com/OpenSC/OpenSC/issues/802 OpenSC issue] and relevant part of [http://pcscworkgroup.com/Download/Specifications/pcsc10_v2.02.09.pdf PC/SC specification].
 
== Installation check ==
 
If you have problem using your certificate, you can run the following program to identify it:
 
* [http://repository.infonotary.com/install/sysinfo/SystemInfo.tar.gz Installation test for Linux]


[[Image:warning.jpg|32px]] According to what is the model of your card, you have to use different software. If the model of the card is „'''T&S DS/2048 (L)'''“, you have to install '''bit4id-ipki''' from folder  Install/Linux on CD or from [[Installation of smart card reader and smart card drivers in Linux]]. If the model is „'''CardOS V4.3B (C)'''“, you will have to install OpenSC and configure it, as it is described in the next chapter.
It can send information directly to us. After report is accepted, it will show nine digit number, that can be used by our support team to see test result. If you do not have Internet connection or direct sending failed, you can save report and send it to [mailto:support@infonotary.com support@infonotary.com].


In order to define your smart card model:
Reader and card should be connected to the computer when test program is started.


* Through pcsc_scan. This program shows what reader and cards are plugged. In Debian and Ubuntu she is contained in package '''pcsc-tools'''. If it shows '''Siemens CardOS V4.3B''', you must use OpenSC. If it says '''Universita' Degli Studi di Torino (Infocert)''', you must use bit4id-ipki.
This program uses one of following packages to show its user interface - python-tk for Debian/Ubuntu, tkinter for Fedora/RedHat or zenity. If you do not have any of them installed, it will still work, but only from terminal.-->

Текуща версия към 10:25, 22 юни 2022

This page is not available!