Skip to content

No certificates recognized on a Gemalto IDPrime 940  #2956

@Nihlus

Description

@Nihlus

Problem Description

I have a company-issued Gemalto IDPrime 940 (allegedly) with a user certificate on it used for logging into our infrastructure. I've been given the task of investigating integration with Linux without the use of proprietary modules to interface with the card, and am currently experimenting with OpenSC 0.24.0-rc2.

The card is properly recognized as an IDPrime 940 by OpenSC, and I can successfully authenticate with it using my PIN. However, none of the tools available (pkcs11-tool, pkcs15-tool, opensc-tool, etc) display any certificates on the card.

There should be a single RSA2048 certificate issued to me with the appropriate attributes for smartcard login on the card, and I've verified that that is the case on a Windows machine running Net iD Access (the proprietary module currently in use).

Steps to reproduce

  1. Insert a Gemalto IDPrime 940 card with at least one certificate on the token
  2. Run pkcs11-tool --login -O
  3. Observe no listed certificates

Logs

https://gist.github.com/Nihlus/cdc6cea6d051a732952a0f4e2e6c3075

I believe I've redacted any sensitive data in the logs; however, I'd very much appreciate a heads-up if I haven't.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions