<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>Ludovic,</div>
<div><br>
</div>
<div>My apologies for confusion. They provide a driver, but the reader is also a generic one. Their alternate install method is to modify the plist that associates vendor/product id with generic readers. As you’ll see in my next reply, this is wonderfully moot
at this point.</div>
<div><br>
</div>
<div>
<p style="margin: 0px; font-size: 13px; line-height: normal; font-family: Calibri; color: rgb(11, 76, 125);">
<b>John Lamb (Contractor)</b></p>
<p style="margin: 0px; font-size: 13px; line-height: normal; font-family: Calibri; color: rgb(11, 76, 125);">
SRA International</p>
<p style="margin: 0px; font-size: 13px; line-height: normal; font-family: Calibri; color: rgb(11, 76, 125);">
National Cancer Institute</p>
<p style="margin: 0px; font-size: 13px; line-height: normal; font-family: Calibri; color: rgb(11, 76, 125);">
Center for Biomedical Informatics and Information Technology</p>
<p style="margin: 0px; font-size: 13px; line-height: normal; font-family: Calibri; color: rgb(11, 76, 125);">
9609 Medical Center Drive</p>
<p style="margin: 0px; font-size: 13px; line-height: normal; font-family: Calibri; color: rgb(11, 76, 125);">
Rockville, MD 20850</p>
<p style="margin: 0px; font-size: 13px; line-height: normal; font-family: Calibri; color: rgb(11, 76, 125); min-height: 15px;">
<br>
</p>
<p style="margin: 0px; font-size: 13px; line-height: normal; font-family: Calibri; color: rgb(11, 76, 125);">
<a href="http://lambje2@mail.nih.gov">lambje2@mail.nih.gov</a></p>
</div>
<div>
<div id="MAC_OUTLOOK_SIGNATURE"></div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Ludovic Rousseau<br>
<span style="font-weight:bold">Date: </span>Wednesday, September 30, 2015 at 6:20 AM<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:smartcardservices-users@lists.macosforge.org">smartcardservices-users@lists.macosforge.org</a>"<br>
<span style="font-weight:bold">Cc: </span>"Lamb, John (NIH/NCI) [C]"<br>
<span style="font-weight:bold">Subject: </span>Re: [SmartcardServices-Users] OS X 10.11 and SmartCard Services<br>
</div>
<div><br>
</div>
<div>
<div bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hello,<br>
<br>
Le 29/09/2015 22:12, Lamb, John (NIH/NCI) [C] a écrit :<br>
</div>
<blockquote cite="mid:5571A5F4-E639-475D-A3A7-3A1261EB6BE5@nih.gov" type="cite">
<div>All,</div>
<div><br>
</div>
<div>I am supporting a large install base of users (roughly 1000 users for 2000 computers) with: </div>
<div><br>
</div>
<div>Identiv SCR3500 A Contact Reader</div>
<div>
<div>Product ID: 0x5814</div>
<div>Vendor ID: 0x04e6 (Shuttle Technology) </div>
</div>
<div>Version: 2.02</div>
<div><br>
</div>
<div>Which are nearly physically identical to </div>
<div><br>
</div>
<div>SMC Microsystems SCx35xx v2.0 USB SC Reader</div>
<div>Product ID: 0x5410</div>
<div>Vendor ID: 0x04e6 (Shuttle Technology)</div>
<div>Version: 3.04</div>
<div><br>
</div>
<div>In OS X 10.7 -> OS X 10.10 the SCx35xx automatically works, the SCR3500 needs a “driver” ( <a class="moz-txt-link-freetext" href="http://support.identive-group.com/show_faq.php?f_kz=1065&lang=EN##">http://support.identive-group.com/show_faq.php?f_kz=1065&lang=EN##</a>)
which adds a new bundle at /usr/libexec/SmartCardServices/Drivers/smccid.bundle</div>
<div><br>
</div>
<div>[ “by works” I mean in /var/logsystem.log the OS will log the insertion/removal of a reader. Be assured that I am not troubleshooting card/user/certificate issues here. ]</div>
<div><br>
</div>
<div>Alternatively, you can use the provided script in that FAQ article to modify the existing ifs-ccid.bundle.</div>
<div><br>
</div>
<div>Therefore, as far as I understand it these are functionally identical, and the issue is properly identifying the card reader to the OS so drivers that already exist can do their job</div>
<div><br>
</div>
<div>In order to be able to support upgrades to OS X 10.11, I will need to provide support for these card readers.</div>
<div><br>
</div>
<div>Due to /usr/libexec being off limits to SIP, i see the following options:</div>
<div><br>
</div>
<ol>
<li>When I create a new OS X 10.11 image, temporarily disable SIP during creation to place the drivers. Should I have a later “driver” conflict I will need to disable SIP to remove the smccid.bundle, which presents challenges at this scale.
</li><li>Ask the developers of smartcardservices if a new release will support these card readers (and I have delayed close as I can to the release of OS X 10.11 so that I can say its “Sept 30th somewhere.”
</li><li>Ask the developers if there is a better way to reference a non-SIP location for a driver (for instance, with 10.11 lacking pcscd (or at the very least, which pcscd coming up with nothing), is /etc/reader.conf still honored? In which case I simply need to
identify the right CHANNELID and i can place the driver at /usr/local/pcsc/drivers/smccid.bundle) or a writeable location somewhere in /Library/ that smart card services already looks for drivers
</li><li>File a bug report to Apple, asking for /usr/libexec/smartcardservices/drivers to be exempted from SIP (I am aware that this strays into unsupported territory and I will be correspondingly courteous and understanding.)
</li></ol>
</blockquote>
<br>
Option 5: ask Idendiv to provide a driver for El Capitan?<br>
<br>
<blockquote cite="mid:5571A5F4-E639-475D-A3A7-3A1261EB6BE5@nih.gov" type="cite">
<div>I will be prepared for 1, and this email is asking politely for 2 or 3. I’ll pursue 4 if warranted.</div>
</blockquote>
<br>
The CCID driver (binaries) has never been provided by the SmartCardServices project.<br>
<br>
Regards,<br>
<br>
<pre class="moz-signature" cols="0">--
Dr. Ludovic Rousseau
</pre>
</div>
</div>
</span>
</body>
</html>