[Piv-test-cards] Test cards #5 and #15

[Sean Bachelder]

Hi all,

I received a set of test PIV cards and found that test cards #5 and #15
cannot be read by my computer / card reader. The same computer / card
reader works with other test cards. Are there any known issues with these
particular test cards? Is it possible the cards were damaged during
shipping?

Thanks,
Sean

Sean Bachelder
Senior Consultant
Twin Technologies, Inc.

[David A. Cooper]

Hello Sean,

Test cards #4, #5, and #15 contain certificates with elliptic curve
keys, whereas the certificates in all of the other cards have RSA keys.
Does card #4 work? If not, then most likely your computer does not
support smart cards with elliptic curve keys.

When I was doing some testing with the cards a few years ago, one OS
that I tried supported certificates with elliptic curve keys if the
private keys were stored in the OSs software key store, but not if the
private keys were stored on a PIV Card. The OS did support RSA private
keys on PIV Cards.

David

[Douglas E Engert]

They both have ECC keys. Looks like all the keys are ECC.
What OS, what software is reading the cards?
Do you have any trace like USB, PCSCD or card driver that would show
a failure?

In the set I have, cards were from 2 different vendors, and one only supported T=0.

> _______________________________________________
> PIV-test-cards mailing list
> PIV-test-cards at nist.gov
> https://groups.google.com/a/list.nist.gov/forum/#!forum/piv-test-cards
>

--

Douglas E. Engert <DEEngert at gmail.com>

[Sean Bachelder]

Thank you both for the reply. Unfortunately I do not have test card #4 to
try out as the cards have been distributed to a team of remote workers.

I am using Mac OSX 10.11 (El Capitan) and a Saicoo Tech card reader (
http://www.saicootech.com/show-99-3-1.html). I have tried gathering
additional information using Centrify Smart Card Assistant (
https://www.centrify.com/express/smart-card-form/), but it doesn't
recognize the smart card when it is inserted. From what I've read, OSX has
supported ECC since Snow Leopard.

Do you all have any additional tips for debugging?

Thanks,
Sean

Sean Bachelder
Senior Consultant
Twin Technologies, Inc.

On Mon, May 23, 2016 at 2:58 PM, Douglas E Engert <deengert at gmail.com>
wrote:

[Douglas E Engert]

An HTML attachment was scrubbed...