Installation of smart card reader and smart card drivers in macOS: Разлика между версии

От Infonotary
Направо към навигацията Направо към търсенето
(Нова страница: == General == In several places in this instruction you have to run a command in Terminal. You can start Terminal from Applications/Utilities or you can write Terminal in …)
 
Редакция без резюме
 
(Не са показани 63 междинни версии от 4 потребители)
Ред 1: Ред 1:
== General ==
In several places in this instruction you have to run a command in Terminal. You can start Terminal from Applications/Utilities or you can write Terminal in Spotlight.
The text {{Шаблон:Console|writen this way}} are commands, which you have to run in Terminal. You dont have to write them just copy them with the clipboard. To work correctly commands which starts with '''sudo''',is nessesary for you to have a password for the user. If you don't have set a temporary one during the settings. After you use one of the commands you will be propted for password.
== What is nessesary to work with digital signature ==
== What is nessesary to work with digital signature ==
In order to use your digital sigature is nessesary to install the driver for the smart card reader, the middleware for the smart card and the service for smart card resders (pcscd) running. The service pcscd must start automatically when you plug a reader.
In order to use your digital sigature is nessesary to install the driver for the smart card reader, the middleware for the smart card and the service for smart card resders (pcscd) running. The service pcscd must start automatically when you plug a reader.
<!--== System requerments ==
The software requered to work with certificates on Mac, supports Mac OS X 10.5 or newer.


== System requerments ==
Support for 10.5 is paritial. All needed drivers work on 10.5 but InfoNotary software for signing of documents and card management does not.-->
The software requered to work with certificates on Mac, supports Mac OS X 10.5 or newer.


== Driver for readers ==
== Driver for readers ==
Ред 14: Ред 10:
[[Картинка:ACR_38T.png]]
[[Картинка:ACR_38T.png]]


If the your reader is labeled with '''ACR38C-SPC-R''' at the bottom, have a sign '''SIMLector 38T''' on the inside or a sign '''mLector-S''', then your device works with the build in driver in the OS and you don't have to install any drivers.
If the your reader is labeled with '''ACR38C-SPC-R''', '''mLector-S''' or '''ACR39T''' at the bottom, then your device works with the build in driver in the OS and you don't have to install any drivers.


=== ACR 38U ===
<!--=== ACR 38U ===
[[Картинка:ACR_38U.png]]
[[Картинка:ACR_38U.png]]


Reader that are labeled ACR 38U,are not compatible with this driver, so if you use such a device you have to install driver from the [http://www.acs.com.hk/drivers-manual.php?driver=ACR38 site of the manifactorer].
Reader that are labeled ACR 38U,are not compatible with this driver, so if you use such a device you have to install driver from the [http://www.acs.com.hk/drivers-manual.php?driver=ACR38 site of the manifactorer].-->


=== Omnikey (HID Global) ===
=== Circle CIR115 ===


[[Картинка:CardMan6121.gif]][[Картинка:CardMan3021.png]]
For you to use Circle, you have to install the driver for your version of macOS:
* [http://repository.infonotary.com/ra/Circle_Mac_Installer_v2.1.2.zip macOS 11 and later versions].


For you to use OmniKey CardMan, you have to install the driver from the site of Hid Global - [http://repository.infonotary.com/drivers/HIDGlobal/ifdokccid_mac_universal-3.1.0.2.dmg Driver HID Global for OS X from 10.5 to 10.8 including].
=== Omnikey (HID Global) ===
<!--* [http://www.infonotary.com/site/files/ifdokccid_mac_10.6_i386-3.0.2.dmg driver OmniKey for OS X 10.6]
* [http://www.infonotary.com/site/files/ifdokccid_mac_10.5_i386-3.0.2.dmg Driver for OS X 10.5]-->


[[Image:warning.jpg|32px]] '''The installatioon of Omnikey driver will disable the driver for smart card readers in Mac OS X. If you use other device you don't have to install them. In case you want to use both please contact with [http://www.infonotary.com/site/?p=suport Infonotary support centar].'''
[[Картинка:CardMan6121.gif]]<!--[[Картинка:CardMan3021.png]]-->
<!--[[Image:warning.jpg|32px]] '''The installatioon of Omnikey driver will disable the driver for smart card readers in Mac OS X.''' In case you want to use on the same computer Omnikey and ACS you will have to install the manifactorer driver of ACS. You can download it from [http://www.acs.com.hk/drivers-manual.php?driver=ACR38 here].-->


[[Image:warning.jpg|32px]] After update of the OS X you have to install the drivers again.
For you to use OmniKey CardMan, you have to install the driver from HID Global for your version of macOS:
 
* За [https://repository.infonotary.com/ra/install/omnikey-macos-installer.dmg '''macOS 10.14 - 10.15'''].
=== Todos ===
* За [https://repository.infonotary.com/ra/install/omnikey-macos-installer.pkg '''macOS 11 and later versions'''].
[[Картинка:TodosArgusMiniII.gif]]
 
To use Todos Argos Mini II you have to install the driver. Depends on what version of Mac OS X you use install the following:
* [http://support.gemalto.com/fileadmin/user_upload/drivers/Todos/Argos_Mini_II/AGMII_MAC/AgmIIMac_v1_1_0_0_OSX_10_6.zip Driver for Mac OS X 10.6]
* [http://support.gemalto.com/fileadmin/user_upload/drivers/Todos/Argos_Mini_II/AGMII_MAC/AgmIIMac_OSX_10_5.zip Driver for Mac OS X 10.5]


== Install Smart Card driver ==
== Install Smart Card driver ==
Depend of the model of your card you have to use different driver. The model of the card is on the Personal Access Rights, which you receive with your card. You can find your smart card model with our [http://repository.infonotary.com/install/sysinfo/SystemInfo.dmg diagnostic software tool]


Depend of the model of your card you have to use different software. The model of the card is on the Personal Access Rights, which you receive with your card. In case your model is „'''T&S DS/2048 (L)'''“, you have to install [[#Install Bit4id Universal Middleware|Bit4id Universal Middleware]] from you installation CD. If the model is „'''CardOS V4.3B (C)'''“, you have to install [[#Download and install OpenSC|OpenSC]].
<!--Depend of the model of your card you have to use different software. The model of the card is on the Personal Access Rights, which you receive with your card. In case your model is „'''T&S DS/2048 (L)'''“, you have to install [[#Install Bit4id Universal Middleware|Bit4id Universal Middleware]]. If the model is „'''CardOS V4.3B (C)'''“, you have to install [[#Download and install OpenSC|OpenSC]].


Incase you dont have Personal Access Rights, you can check your card model with this command {{Шаблон:Console|pcsctest}} от терминал. She will ask you for the reader number, you have to press 1. If there is no problem with the reader installation you will get a row beginning with „Current Reader ATR Value“. Against this text is an indetifier for the card.
Incase you dont have Personal Access Rights, you can check your card model with this command {{Шаблон:Console|pcsctest}} from terminal. She will ask you for the reader number, you have to press 1. If there is no problem with the reader installation you will get a row beginning with „Current Reader ATR Value“. Against this text is an indetifier for the card.
* For T&S DS/2048 the indentidier is „3B FF 18 00 FF 81 31 FE 55 00 6B 02 09 03 03 01 11 01 43 4E 53 11 31 80 8C“.
* For T&S DS/2048 the indentidier is „3B FF 18 00 FF 81 31 FE 55 00 6B 02 09 03 03 01 11 01 43 4E 53 11 31 80 8C“.
* For CardOS V4.3 the indentidier is „3B F2 18 00 02 C1 0A 31 FE 58 C8 08 74“.
* For CardOS V4.3 the indentidier is „3B F2 18 00 02 C1 0A 31 FE 58 C8 08 74“.-->


=== Installation of Bit4id Universal Middleware ===
=== For smart card IDPrime ===
To use Bit4id on Mac OS X, you must install Bit4id Universal Middleware. You can find it on the installation CD, in folder Install/MacOSX. to work with  Firefox и Thunderbird, you have to install Bit4id Cryptoki Libraries 1.2.12.pkg, and for integration with the OS and the other programs for Mac OS X - bit4id-tokend-ts-en-1.2.9.0.pkg.dmg.
<!--
[http://repository.infonotary.com/install/mac/Bit4id-Cryptoki-Libraries-1.2.13.pkg Bit4id-Cryptoki-Libraries]
[http://repository.infonotary.com/install/mac/bit4id-tokend-ts-en-1.2.9.0.pkg.dmg bit4id-tokend-ts]
-->


In case you have to register the PKCS#11 module на Bit4id in a program different from Firefox, Thunderbird or InfoNotary Smart Card Manager you have to specify a path - /System/Library/bit4id/cryptoki/libbit4ipki.dylib.
You can download the latest version for your OS from here:
* For [https://repository.infonotary.com/ra/Middleware/SafeNet/macOS/SafeNetAuthenticationClient.10.8.267.0_Core.dmg '''macOS 11 and newer'''].


After the installation continue with configuration [[Използване на квалифициран електронен подпис в Mozilla Firefox за Mac OS X|Firefox]] or [[Install Infonotary Certificate Chain on Mac OS X |Safari]].
After the installation continue with configuration for [[Using your digital signature with Firefox on MAC OS X|Firefox]] or [[Install Infonotary Certificate Chain on Mac OS X |Safari]].


=== Download and install OpenSC ===
To use your certificate on OSX you must install OpenSC. '''With OpenSС you dont install any program with graphic interface so you wont find anything in Applications'''. You can download the latest version for your OS from here:
* За [http://repository.infonotary.com/install/mac/OpenSC-git-20120619180437-10.8.dmg Mac OS X 10.8].
* За [http://repository.infonotary.com/install/mac/OpenSC-0.12.2-10.7.dmg Mac OS X 10.7].
* За [http://repository.infonotary.com/install/mac/OpenSC-0.12.2-10.6.dmg Mac OS X 10.6].
* За [http://repository.infonotary.com/install/mac/OpenSC-0.12.0-rc1-10.5.dmg Mac OS X 10.5].


In case you have to register the PKCS#11 module на Bit4id in a program different from Firefox, Thunderbird or InfoNotary Smart Card Manager you have to specify a path - /Library/OpenSC/lib/onepin-opensc-pkcs11.so.
=== For smart card Bit4ID/Idemia ===


After the installation continue with configuration [[#Проверка на инсталацията|Проверка на инсталацията]] or [[Използване на квалифициран електронен подпис в Mozilla Firefox за Mac OS X|Firefox]] and [[Install Infonotary Certificate Chain on Mac OS X |Safari]].
Please write to '''support@infonotary.com''' , and we will send you the driver.


=== Use both OpenSC and Bit4id Universal Middleware ===
<!--In case you have to register the PKCS#11 module на Bit4id in a program different from Firefox, Thunderbird or InfoNotary Smart Card Manager you have to specify a path - /Library/bit4id/cryptoki/libbit4ipki.dylib.-->
In case you want to use both OpenSC and Bit4id Universal Middleware on the same computer you have to forbid OpenSC to access T&S DS/2048 smart cards. This can easily be done by replacing the configuration file of OpenSC (/Library/OpenSC/etc/opensc.conf) with [http://repository.infonotary.com/install/mac/opensc.conf this one].
<!--You can download the latest version for your OS from here:
* For [http://repository.infonotary.com/ra/bit4id-middleware-1.4.10.633.dmg '''macOS 10.15 and newer'''].
* For [http://repository.infonotary.com/ra/bit4id-MAC_OS-middleware-pinpad-1.4.9.395.dmg '''macOS 10.9 - 10.14'''].-->
After the installation continue with configuration [[Using your digital signature with Firefox on MAC OS X |'''Firefox''']] or [[Install Infonotary Certificate Chain on Mac OS X |'''Safari''']].


== Testing Installation ==
In case of a problem run this program '''with a reader plugged in''' i send the text with a breaf description of the problem on [mailto:support@infonotary.com?Subject=%D0%9F%D1%80%D0%BE%D0%B1%D0%BB%D0%B5%D0%BC%20%D1%81%20%D0%B8%D0%BD%D1%81%D1%82%D0%B0%D0%BB%D0%B0%D1%86%D0%B8%D1%8F%D1%82%D0%B0%20%D0%BD%D0%B0%20Mac%20OS%20X support@infonotary.com]:
* [http://repository.infonotary.com/install/mac/TestInstallation.tar.gz Test Installation program] for Mac OS X 10.6 and newer.


<!--After installing OpenSC restart your computer. Then you can check if the reader and the smart card are recognized with the following commands in Terminal  ('''you must plug the reader in the computer before running the tests'''):


1) {{Шаблон:Console|ps ax &#124; grep pcscd &#124; grep -v "grep pcscd"}} - this commands checks if the pcscd daemon is running. You must receive result like this:
=== For smart card Siemens CardOS ===
2440 ?        Ssl    0:00 /usr/sbin/pcscd -f
For smart card Siemens you must install OpenSC. '''With OpenSС you dont install any program with graphic interface so you wont find anything in Applications'''.  
In case you dont get this there is a problem with the installation.


2) {{Шаблон:Console|/Library/OpenSC/bin/opensc-tool -l}} - this command lists all the reader that are plugged in the computer. You must receive result like this:
You can download the latest version for your OS from here:
Readers known about:
* For [https://github.com/OpenSC/OpenSC/releases/download/0.21.0/OpenSC-0.21.0.dmg '''macOS 10.15 and newer'''].
Nr.   Driver    Name
* For [http://repository.infonotary.com/install/mac/OpenSC-0.16.0.dmg '''macOS 10.9 - 10.14'''].
0     pcsc      OMNIKEY CardMan 6121 0


3) {{Шаблон:Console|/Library/OpenSC/bin/opensc-tool -n}} - with this command you can check if the samrt card is recognized correctly. If everything is OK you must receive the following „CardOS M4“. If you receive an error finishing on „Failed to connect to card: Unresponsive card (correctly inserted?)“, most probably your card is not inserted correctly in the reader.
After the installation continue with configuration for [[Using your digital signature with Firefox on MAC OS X|Firefox]] or [[Install Infonotary Certificate Chain on Mac OS X |Safari]].
-->
<!--=== Use both OpenSC and Bit4id Universal Middleware ===
In case you want to use both OpenSC and Bit4id Universal Middleware on the same computer you have to forbid OpenSC to access T&S DS/2048 smart cards. The easiest way to do it is to use following program:
:[http://repository.infonotary.com/install/mac/FixOpenSC.app.tar.gz Disable Bit4id cards in OpenSC].


== Manually running and stopping pcscd ==
If you prefer to do it manually you can find instructions on [[Working with OpenSC#Forbid_OpenSC_to_work_with_a_specific_card | OpenSC page]].-->
On Mac OS X pcscd is starting from securityd when a reader is inserted. In case you want to forbid the automatic start yo must edit the file /System/Library/LaunchDaemons/com.apple.securityd.plist.
<!--This can easily be done by replacing the configuration file of OpenSC (/Library/OpenSC/etc/opensc.conf) with [http://repository.infonotary.com/install/mac/opensc.conf this one].-->
In this file you must add the collored rows:
<string>/usr/sbin/securityd</string>
<string>-i</string>
{{Color|<string>-s</string>|black|orange}}
{{Color|<string>off</string>|black|orange}}


After that restart the computer.
== Testing Installation ==
 
If you have problem using your certificate, you can run the following program to identify it:
To start manually pcscd yo must start this command from Terminal {{Шаблон:Console|sudo /usr/sbin/pcscd -f}}. When the daemon is started this way to stop it you press Ctrl + C or run {{Шаблон:Console|sudo killall pcscd}} in Terminal.


== Uninstall ==
* [http://repository.infonotary.com/install/sysinfo/SystemInfo.dmg Installation test for macOS]
OpenSC can be uninstaled with this command - {{Шаблон:Console|sudo /usr/local/bin/opensc-uninstall}} or with {{Шаблон:Console|sudo /Library/OpenSC/bin/opensc-uninstall}} for old versions of (SCA).


Bit4id Universal Middleware can be uninstaled, by running the program Uninstaller from the folder /System/Library/bit4id.
The program can send information directly to us. After report is accepted, it will show nine digit number, that can be used by our support team to see test result. If you do not have Internet connection or direct sending failed, you can save report and send it to [mailto:support@infonotary.com support@infonotary.com].


== Documentation ==
Reader and card should be connected to the computer when test program is started.
Documentation for OpenSC is available on [http://www.opensc-project.org/ Internet] or in folder /Library/OpenSC/doc/ after the installation.


On the page [[Working with OpenSC]] you can find instruction for th most common operation with OpenSC.


[[Категория:Инсталация и използване на удостоверения за електронен подпис]]
[[Категория:Инсталация и използване на удостоверения за електронен подпис]]
[[Категория:Mac OS X]]
[[Категория:MacOS]]
[[Категория:Помощ]]
[[Категория:Помощ]]

Текуща версия към 10:33, 7 септември 2023

What is nessesary to work with digital signature

In order to use your digital sigature is nessesary to install the driver for the smart card reader, the middleware for the smart card and the service for smart card resders (pcscd) running. The service pcscd must start automatically when you plug a reader.

Driver for readers

ACR 38C

ACR 38T.png

If the your reader is labeled with ACR38C-SPC-R, mLector-S or ACR39T at the bottom, then your device works with the build in driver in the OS and you don't have to install any drivers.


Circle CIR115

For you to use Circle, you have to install the driver for your version of macOS:

Omnikey (HID Global)

CardMan6121.gif

For you to use OmniKey CardMan, you have to install the driver from HID Global for your version of macOS:

Install Smart Card driver

Depend of the model of your card you have to use different driver. The model of the card is on the Personal Access Rights, which you receive with your card. You can find your smart card model with our diagnostic software tool


For smart card IDPrime

You can download the latest version for your OS from here:

After the installation continue with configuration for Firefox or Safari.


For smart card Bit4ID/Idemia

Please write to support@infonotary.com , and we will send you the driver.

After the installation continue with configuration Firefox or Safari.


For smart card Siemens CardOS

For smart card Siemens you must install OpenSC. With OpenSС you dont install any program with graphic interface so you wont find anything in Applications.

You can download the latest version for your OS from here:

After the installation continue with configuration for Firefox or Safari.

Testing Installation

If you have problem using your certificate, you can run the following program to identify it:

The program can send information directly to us. After report is accepted, it will show nine digit number, that can be used by our support team to see test result. If you do not have Internet connection or direct sending failed, you can save report and send it to support@infonotary.com.

Reader and card should be connected to the computer when test program is started.