SC650 format/enroll fails

[pki-bot]

This issue was migrated from Pagure Issue #1583. Originally filed by rpattath (@rpattath) on 2015-08-24 18:44:16:

• Closed as Fixed
• Assigned to nobody
• Associated bugzillas
  • https://bugzilla.redhat.com/show_bug.cgi?id=1255964

---

SC650 format/enroll fails

Steps to Reproduce:

1. Delete the applet on the SC650 card using gpshell
2. Format the card using TPS server phone home url on RHCS9

Actual results:

format fails

Expected results:

format/enroll should be successful

Additional info:

tks debug log messages

[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: Protocol: null temp:
1F250800586E
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: keySet selected: defKeySet
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: keySet selected: defKeySet
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: SignedAuditEventFactory:
create() message=[AuditEvent=COMPUTE_SESSION_KEY_REQUEST][CUID_encoded=534E0
650000100000105][KDD_encoded=00000000000000000000][Outcome=Suc
cess][AgentID=TPS-cloud-qe-19.idmqe.lab.eng.bos.redhat.com-31478] TKS Compute
session key request

[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: processComputeSessionKey:
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: TokenServlet: serversideKeygen
requested
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: TokenServlet:
ComputeSessionKey(): tksSharedSymKeyName: sharedSecret
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: TokenServlet: Invalid card
challenge length.
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]:
TokenServlet:outputString.encode status=3
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]:
TokenServlet:outputString.length 8
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: SignedAuditEventFactory:
create() message=[AuditEvent=COMPUTE_SESSION_KEY_REQUEST_PROCESSED_FAILURE][CUI
D_decoded=534E0650000100000105][KDD_decoded=00000000000000000000][Outcome=Failu
re][status=3][AgentID=TPS-cloud-qe-19.idmqe.lab.eng.bos.redhat.com-31478][IsCry
ptoValidate=true][IsServerSideKeygen=true][SelectedToken=null][KeyNickName=null
][TKSKeyset=defKeySet][KeyInfo_KeyVersion=0xff][NistSP800_108KdfOnKeyVersion=0x
ff][NistSP800_108KdfUseCuidAsKdd=false][Error=Missing input parameters :
card_challenge length] TKS Compute session key request failed

[pki-bot]

Comment from jmagne (@jmagne) at 2015-08-25 02:02:32

commit 3e484b8
Author: Jack Magne jmagne@localhost.localdomain
Date: Mon Aug 24 11:23:04 2015 -0700

SC650 format/enroll fails

Simple fix to correctly identify scp01/gp201 sc650 card.

[pki-bot]

Comment from jmagne (@jmagne) at 2015-08-25 03:29:00

Had to reverse merge commit:

This commit has been redone:

commit 3158e12
Author: Jack Magne jmagne@localhost.localdomain
Date: Mon Aug 24 11:23:04 2015 -0700

SC650 format/enroll fails

Simple fix to correctly identify scp01/gp201 sc650 card.

[pki-bot]

Comment from rpattath (@rpattath) at 2017-02-27 14:04:45

Metadata Update from @rpattath:

• Issue set to the milestone: 10.2.6