Re: [Tokend-Dev] Tokend-Dev Digest, Vol 31, Issue 1
Thanks for the reply. In my situation, I have a reader using only USB HID(Human Interface Device) protocol to communicate with MacOS, It is not a CCID reader, but I can write a PCSC driver for the reader under Windows and then use PCSC API to communicate with it, can I also write a PCSC driver to do that under MacOSX? If I can, What should I do to achieve that? Is that only CCID reader can initiate the loading of TokenD? I would like to know how securityd, pcscd and tokend interact, and what happened from when a USB reader plugin into the system to when the corresponding Tokend is loaded. At 2015-08-11 03:00:01, tokend-dev-request@lists.macosforge.org wrote:
Send Tokend-Dev mailing list submissions to tokend-dev@lists.macosforge.org
To subscribe or unsubscribe via the World Wide Web, visit https://lists.macosforge.org/mailman/listinfo/tokend-dev or, via email, send a message with subject or body 'help' to tokend-dev-request@lists.macosforge.org
You can reach the person managing the list at tokend-dev-owner@lists.macosforge.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Tokend-Dev digest..."
Today's Topics:
1. Re: Tokend-Dev post from liudy75@163.com requires approval (Shawn A. Geddis)
----------------------------------------------------------------------
Message: 1 Date: Sun, 09 Aug 2015 14:32:07 -0700 From: "Shawn A. Geddis" <geddis@apple.com> To: liuddd <liudy75@163.com> Cc: Tokend-Dev <tokend-dev@lists.macosforge.org> Subject: Re: [Tokend-Dev] Tokend-Dev post from liudy75@163.com requires approval Message-ID: <1216EAFC-0357-411E-AB3F-2FF2F7995A53@apple.com> Content-Type: text/plain; charset="utf-8"
From: liuddd <liudy75@163.com> Date: August 6, 2015 at 2:34:38 AM PDT To: tokend-dev@lists.macosforge.org Subject: get tokend loaded for USB HID device
Hi ! I wan't to get my own tokend get loaded, but my device is a USB HID device. Is there any way to do it? Can I just send some message to securityd to accomplish it? Thanks for some advices.
You have provided very little information for anyone to be able to help. You will need to provide much more for us to know exactly what you need for direction.
A Tokend is for communication usually to an Applet on the card and not to the device ? USB devices actually play the role of both reader and token in one. Devices are required to be supported first by a reader driver ? default driver included in OS X is a CCID driver which supports hundreds of readers ? may or may not supports yours - can?t tell since we do not know what reader and token type you are using.
When you insert a token (ie. provisioned Smart Card into a reader or a USB Composite Token), all of the installed Tokend modules will be launched by the OS with each performing their own probing of the card to determine what it is (ie. BELPIC, CAC, CACNG, JPKI, PIV, etc?) and determining whether it knows and can communicate with that card type. Scoring takes place and the Tokend with the highest score remains live and associated with that card for this session. You can execute the command ?top? in Terminal prior to inserting your token. If you do not see the tokend names I listed above appear or remain after probing (or one that may correspond to a tokend you installed) then there is no currently supported tokend for the token you have inserted.
If you can provide more, we can give more/better guidance.
- Shawn _____________________________________________________________________ Shawn Geddis geddis@{Mac | Me | iCloud}.com Security and Certifications Engineer, Apple geddis@apple.com
Smart Card Services Project/Dev Lead: Project Wiki: [SmartCardServices.MacOSFforge.Org <http://smartcardservices.macosfforge.org/>] Mailing Lists: [Lists.MacOSForge.Org/mailman/listinfo <http://lists.macosforge.org/mailman/listinfo>] SCS Contact: [scs-contact@macosforge.org <mailto:scs-cotact@macosforge.org>] SCS Admin: [scs-admin@macosforge.org <mailto:scs-admin@macosforge.org>] _____________________________________________________________________
Hello, 2015-08-12 9:14 GMT+02:00 liuddd <liudy75@163.com>:
Thanks for the reply. In my situation, I have a reader using only USB HID(Human Interface Device) protocol to communicate with MacOS, It is not a CCID reader, but I can write a PCSC driver for the reader under Windows and then use PCSC API to communicate with it, can I also write a PCSC driver to do that under MacOSX? If I can, What should I do to achieve that? Is that only CCID reader can initiate the loading of TokenD? I would like to know how securityd, pcscd and tokend interact, and what happened from when a USB reader plugin into the system to when the corresponding Tokend is loaded.
Yes, you will have to write a PC/SC driver for Mac OS X. The system will detect when you insert your USB device and start the PC/SC driver and the different tokend. Maybe you can write a fake/limited PC/SC driver and use HID directly (instead of PC/SC) in your tokend. Bye -- Dr. Ludovic Rousseau
participants (2)
-
liuddd
-
Ludovic Rousseau