pincode

26 views
Skip to first unread message

KG

unread,
Oct 24, 2016, 3:48:29 AM10/24/16
to eID Middleware
Hello,

We have a strange problem.

Case:
- a user reads eid cards (we use c# and the eid middleware)
- afterwards this user uses a webservice from within our software but he has to re-enter several times his pincode for his smartcard

The only solution is to restart his pc and when he then uses the webservice he only has to enter once his pincode.
Is this related to the eid middleware ?

Wkr,

Kris

Frederik Vernelen

unread,
Oct 24, 2016, 4:39:12 AM10/24/16
to eid...@googlegroups.com
Hello,

There might be 2 issues related with this:
A) First: if only one sign request is asked by the webservice, only one Pin entry will be shown.
On the other hand, if multiple sign request are asked, it could be that multiple PIN entries are asked for (see B)
(We have seen issues like this in the past, with webservices that set up multiple SSl connections (each for a different content type) )

B) For the authentication keys, the eID card remembers the permission to use this keypare after the PIN has been entered once.
(So even if multiple signatures are asked for, it can be that only PIN entry is needed, because the permission to use the auth keys to create a signature is remembered)
However, if that permission is reset (or the card as a whole is rest), Pin verification will be needed again before a signature can be created.
(e.g. a browser can reset a card (and not all browsers behave the same)  )


Can you activate the logging?
It will show you which application is sending the PIN verify requests, and which application that might be resetting the eID card.

to activate logging: use regedit to alter/create following key:
HKLM/SOFTWARE/BEID/logging
in this key, create the string values (REG_SZ):
log_level and log_dirname
set log_dirname to C:\Program Files (x86)\Belgium Identity Card\log
and log_level to debug

Wkr,
 Frederik

--
Je hebt dit bericht ontvangen omdat je bent geabonneerd op de groep "eID Middleware" van Google Discussiegroepen.
Als je je wilt afmelden bij deze groep en geen e-mails van de groep meer wilt ontvangen, stuur je een e-mail naar eid-mw+unsubscribe@googlegroups.com.
Als je een bericht in deze groep wilt plaatsen, stuur je een e-mail naar eid...@googlegroups.com.
Bezoek deze groep op https://groups.google.com/group/eid-mw.
Ga naar https://groups.google.com/d/optout voor meer opties.

Reply all
Reply to author
Forward
0 new messages