Re: [SmartcardServices-Users] [Fed-Talk] Trying to attach smart card reader to VM on OS 10.8
Apologies for the cross-post, but I want to finish the thread. (I wish there were more traffic on the SC Services list.) My memory of the situation was that I couldn't configure VirtualBox to capture the device until after it had already captured it. A bit of a catch 22. I'm not currently running VB (running Parallels so I can't verify this) but I guess the recommended procedure would be: 1) Start VirtualBox 2) Connect SC reader 3) kill pcscd (under MacOS) 4) Capture the reader in a VB VM (before pcscd gets restarted) 5) Configure VB to auto-capture the device. 6) Shut down VB. 7) Reboot Afraid I no longer remember details about whether the card was in the reader or not when I was playing with this. On Dec 10, 2012, at 8:10 AM, Shawn Geddis wrote:
John / Henry / others...
Two quick points of interest....
• SmartCard discussions should always be over at the project: SmartCardServices at MacOSForge.Org http://smartcardservices.macosforge.org/trac/wiki/MailLists
• Manually killing any component of SmartCard Services (ie. pcscd) under OS X ... - This will only make your environment unstable from that point on. - If you insert a reader into your hardware under OS X, it will auto-launch pcscd under strict control of securityd - After two minutes of no smart card insertion, securityd will auto-kill pcscd and remove control.
Work arounds - Your VT solution should always allow you to capture/block the hardware in the active environment. - if you Launch the Windows environment and insert reader then, prior to insertion under OS X, it will capture it there.
Killing processes under OS X just to access a device that is automatically handled is not a suggested approach.
-Shawn
On Dec 10, 2012, at 8:22 AM, "Myers, John (NIH/NICHD) [C]" <john.myers@nih.gov> wrote:
Thanks Henry. I'll try to find the process and kill it. Alternatively I'll try a different server.
Chris
----- Original Message ----- From: Henry B. Hotz [mailto:hotz@jpl.nasa.gov] Sent: Friday, December 07, 2012 10:14 PM To: Myers, John (NIH/NICHD) [C] Cc: Apple Fed-Talk <fed-talk@lists.apple.com> Subject: Re: [Fed-Talk] Trying to attach smart card reader to VM on OS 10.8
Parallels seems to do it OK.
Back when I was playing with VB, I was able to configure it to auto-snarf the reader when it was plugged in. Absent that setting, I had to manually kill pcscd before VB could grab the reader. Been a while, so I forget the details of where the setting were. MacOS 10.6.something.
Also you needed to have the "extras" package installed or it didn't have USB support at all. Looks like that's not your problem though.
On Dec 7, 2012, at 11:28 AM, Myers, John (NIH/NICHD) [C] wrote:
Hi everyone,
Do any of you know a way to get a Virtual Server (Virtualbox in this instance) to bind a PIV card reader when plugged into a Mac running 10.6.8? Every time I try I get the message "failed to attach"Š"device in is use by someone else."
Thanks, Chris
------------------------------------------------------ The opinions expressed in this message are mine, not those of Caltech, JPL, NASA, or the US Government. Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
2012/12/12 Henry B. Hotz <hotz@jpl.nasa.gov>:
Apologies for the cross-post, but I want to finish the thread. (I wish there were more traffic on the SC Services list.)
My memory of the situation was that I couldn't configure VirtualBox to capture the device until after it had already captured it. A bit of a catch 22.
I'm not currently running VB (running Parallels so I can't verify this) but I guess the recommended procedure would be:
1) Start VirtualBox 2) Connect SC reader
Be sure to have no card in the reader or Mac OS X will try to use it and killing pcscd could have bad effects.
3) kill pcscd (under MacOS) 4) Capture the reader in a VB VM (before pcscd gets restarted)
pcscd should not be restarted unless you (re)connect a smart card reader.
5) Configure VB to auto-capture the device.
This step is not needed.
6) Shut down VB. 7) Reboot
No need to reboot. pcscd should be started in Mac OS X the next time you plug a smart card reader. I agree with Shawn that killing a (system) process you did not start yourself is, in general, a bad idea. But it may work. Bye -- Dr. Ludovic Rousseau
On Dec 12, 2012, at 2:21 AM, Ludovic Rousseau wrote:
pcscd should be started in Mac OS X the next time you plug a smart card reader.
This thread was all about how to prevent this. Pretty sure if you want to prevent it, then step 5 is needed. In fact the rest of the procedure was about making it possible to do step 5. We wanted the reader connected to a VirtualBox VM instead of to the host MacOS. I'm guessing by the time I cc'ed this list that some of the context had fallen off. ------------------------------------------------------ The opinions expressed in this message are mine, not those of Caltech, JPL, NASA, or the US Government. Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
2012/12/19 Henry B. Hotz <hotz@jpl.nasa.gov>:
On Dec 12, 2012, at 2:21 AM, Ludovic Rousseau wrote:
pcscd should be started in Mac OS X the next time you plug a smart card reader.
This thread was all about how to prevent this. Pretty sure if you want to prevent it, then step 5 is needed. In fact the rest of the procedure was about making it possible to do step 5.
We wanted the reader connected to a VirtualBox VM instead of to the host MacOS. I'm guessing by the time I cc'ed this list that some of the context had fallen off.
OK. If you want to _completely_ disable the automatic start of pcscd in Mac OS X then edit the file /System/Library/LaunchDaemons/com.apple.securityd.plist as documented in [1] and reboot. Bye [1] http://lists.apple.com/archives/apple-cdsa/2007/Nov/msg00009.html -- Dr. Ludovic Rousseau
participants (2)
-
Henry B. Hotz
-
Ludovic Rousseau