<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hello,<br>
<br>
Le 29/09/2015 22:12, Lamb, John (NIH/NCI) [C] a écrit :<br>
</div>
<blockquote cite="mid:5571A5F4-E639-475D-A3A7-3A1261EB6BE5@nih.gov"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<div>All,</div>
<div><br>
</div>
<div>I am supporting a large install base of users (roughly 1000
users for 2000 computers) with: </div>
<div><br>
</div>
<div>Identiv SCR3500 A Contact Reader</div>
<div>
<div>Product ID: 0x5814</div>
<div>Vendor ID: 0x04e6 (Shuttle Technology) </div>
</div>
<div>Version: 2.02</div>
<div><br>
</div>
<div>Which are nearly physically identical to </div>
<div><br>
</div>
<div>SMC Microsystems SCx35xx v2.0 USB SC Reader</div>
<div>Product ID: 0x5410</div>
<div>Vendor ID: 0x04e6 (Shuttle Technology)</div>
<div>Version: 3.04</div>
<div><br>
</div>
<div>In OS X 10.7 -> OS X 10.10 the SCx35xx automatically
works, the SCR3500 needs a “driver”
( <a class="moz-txt-link-freetext" href="http://support.identive-group.com/show_faq.php?f_kz=1065&lang=EN##">http://support.identive-group.com/show_faq.php?f_kz=1065&lang=EN##</a>)
which adds a new bundle at
/usr/libexec/SmartCardServices/Drivers/smccid.bundle</div>
<div><br>
</div>
<div>[ “by works” I mean in /var/logsystem.log the OS will log the
insertion/removal of a reader. Be assured that I am not
troubleshooting card/user/certificate issues here. ]</div>
<div><br>
</div>
<div>Alternatively, you can use the provided script in that FAQ
article to modify the existing ifs-ccid.bundle.</div>
<div><br>
</div>
<div>Therefore, as far as I understand it these are functionally
identical, and the issue is properly identifying the card reader
to the OS so drivers that already exist can do their job</div>
<div><br>
</div>
<div>In order to be able to support upgrades to OS X 10.11, I will
need to provide support for these card readers.</div>
<div><br>
</div>
<div>Due to /usr/libexec being off limits to SIP, i see the
following options:</div>
<div><br>
</div>
<ol>
<li>When I create a new OS X 10.11 image, temporarily disable
SIP during creation to place the drivers. Should I have a
later “driver” conflict I will need to disable SIP to remove
the smccid.bundle, which presents challenges at this scale.</li>
<li>Ask the developers of smartcardservices if a new release
will support these card readers (and I have delayed close as I
can to the release of OS X 10.11 so that I can say its “Sept
30th somewhere.”</li>
<li>Ask the developers if there is a better way to reference a
non-SIP location for a driver (for instance, with 10.11
lacking pcscd (or at the very least, which pcscd coming up
with nothing), is /etc/reader.conf still honored? In which
case I simply need to identify the right CHANNELID and i can
place the driver at /usr/local/pcsc/drivers/smccid.bundle) or
a writeable location somewhere in /Library/ that smart card
services already looks for drivers</li>
<li>File a bug report to Apple, asking for
/usr/libexec/smartcardservices/drivers to be exempted from SIP
(I am aware that this strays into unsupported territory and I
will be correspondingly courteous and understanding.)</li>
</ol>
</blockquote>
<br>
Option 5: ask Idendiv to provide a driver for El Capitan?<br>
<br>
<blockquote cite="mid:5571A5F4-E639-475D-A3A7-3A1261EB6BE5@nih.gov"
type="cite">
<div>I will be prepared for 1, and this email is asking politely
for 2 or 3. I’ll pursue 4 if warranted.</div>
</blockquote>
<br>
The CCID driver (binaries) has never been provided by the
SmartCardServices project.<br>
<br>
Regards,<br>
<br>
<pre class="moz-signature" cols="0">--
Dr. Ludovic Rousseau
</pre>
</body>
</html>