April 2010 - SmartcardServices-Users

JITC CAC card gets " An untrusted certificate authority was detected while processing the smart card certificate used for authentication" login error...
by Paul Kwan 01 May '10

01 May '10

Hi All, I posted this message in the Fed-Talk forum accidentally. I should post it here. Here's my message: I have a test JITC CAC card that worked on Mac and Windows workstations since May last year. Now I got the following error when trying to login again: 1) From the Windows login screen, it pops up this error message: The system could not log you on. An untrusted certificate authority was detected while processing the smart card certificate used for authentication 2) On the Mac, secure.log shows similar error message complaining on "An untrusted CA..." The JITC CAC card is valid until next year. And the DoD certs on AD are also valid: 2.1) "DOD OM CA-20": Valid from 8/3/2007 to 8/1/2013 2.2) "DOD OM EMAIL CA-20": Valid from 8/2/2007 to 4/1/2013 2.3) "DoD JITC Root CA 2": Valid from 7/14/2005 to 7/2/2030 3) I can access and download the CRL files without any problem: 3.1) http://crl.nit.disa.mil/getcrl?DoD JITC Root CA 2 3.2) http://crl.nit.disa.mil/getcrl?DOD OM CA-20 3.3) http://crl.nit.disa.mil/getcrl?DOD OM EMAIL CA-20 Does anybody out there see the similar problem? How can I fix this so that my test JITC CAC card works again? Thanks for the help in advance. PSK

2 3

Re: [SmartcardServices-Users] Problem with pcscd and GD card
by Francis Augusto Medeiros 09 Apr '10

09 Apr '10

To be quite honest, they are still trying to figure it out. It seems to me that their rep that was in charge of my issue will end up handling it to a higher level support. Francis On 09/04/2010, at 08:24, Chris Hauser wrote: > If SafeNet's Software or Installer broke a part of your system. > What's the statement from SafeNet? > > > Chris > > Am 08.04.2010 um 20:55 schrieb Francis Augusto Medeiros: > >> Shawn, >> >> It seems you got some of my points wrong. >> >> 1 - I didn't install TokenLounge. I should have and wanted to do so, but I was provided with SafeNet's Borderless PK Security for Mac, which caused the whole problem. >> >> 2 - How can I reinstall my Services and CCID so that I have things in the original state without having to reinstall the whole OS? >> >> I have another Mac where things are working fine. Are there files I could/should copy and replace mine on the corrupted system in an attempt to make it work? >> >> Yours, >> >> Francis > > > -- > This e-mail is digital signed. If your e-mail-application doesn't support > the verification of digital signatures, just ignore the signature-file. > > >

1 0

Problem with pcscd and GD card
by Francis Augusto Medeiros 09 Apr '10

09 Apr '10

Hi there folks, I have a Gemalto PCTwin usb smartcard reader, which I intended to use with my GD smartcard. My CA sent me a middleware called SafeSign 3.0, so I could use my smartcard on the Mac. Unfortunately, it just works with Firefox. I wanted something that would work with Keychain and standard Mac apps. So I asked them if they had TokenLounge, which is AET's tokend for Mac. They sent me something else, called Safenet Borderless Security PK for Mac. It didn't work on my Mac 10.6.3 install, and precluded my newer SafeSign to work. So I uninstalled it. Now my card can't be read on my Mac! I tested it under Windows and on another mac, and it works there. So, doing some research, I found out that my pcscd is not running, and I can't make it run. When I try to run it typing pcscd -f, I get this: User signal 2 And when typing sudo pcscd -df I get this: /SourceCache/SmartCardServices/SmartCardServices-36160/src/PCSC/debuglog.c:240:DebugLogSetLevel() debug level=debug /SourceCache/SmartCardServices/SmartCardServices-36160/src/PCSC/pcscdaemon.c:389:main() pcscd set to foreground with debug send to stderr /SourceCache/SmartCardServices/SmartCardServices-36160/src/PCSC/readerfactory.c:1545:ReaderCheckArchitecture() Send respawn signal to pcscd (pid=794) User signal 2 Is there any clue on how can I get things back working again? Yours, Francis -- -------------------------------------------------------------------- Francis Augusto Medeiros ICQ:7825595 Skype: francisaugusto AIM/iChat: francisaugusto Vitória da Conquista - Bahia - Brasil "Lâmpada para os meus pés é a Tua palavra, e luz para o meu caminho" --- Salmo 119:105 --------------------------------------------------------------------

4 8