test

Solaris Smartcard Administration Guide

Chapter 3 Adding or Removing a Card Reader

This chapter describes the procedures for adding or removing a card reader:

Adding a Card Reader

This section provides the following procedures:

Refer to the smartcard(1M) man page for other information.

ProcedureTo Add Internal Card Reader (Command Line)

Solaris Smartcard supports an internal card reader, using the IFD handler to configure the reader. Do the following to add an internal card reader from the command line.

Steps

  1. Verify that the ocfserv daemon is enabled.

    The following command provides the status of the service.


    % svcs network/rpc/ocfserv
    Note –

    Before you make any changes to Smartcard, you must make sure that the ocfserv daemon is enabled.

  2. (Optional) If necessary, as root, enable the ocfserv daemon.


    # svcadm enable network/rpc/ocfserv

  3. Add the Sun Internal Card Reader by typing, for example, the following command on one line:


    # smartcard -c admin -t terminal 
-H /usr/lib/smartcard/ifdh_scmi2c.so 
-x add -d /dev/scmi2c0 -r MyInternalReader -n SunISCRI
    -c admin

    Indicates that you are viewing or are modifying OCF properties.

    -t terminal

    Indicates you are configuring a card reader.

    -H /usr/lib/smartcard/ifdh_scmi2c.so

    Specifies the location of the IFD handler.

    -x add

    Indicates that you are adding a card reader.

    -d /dev/scmi2cn

    Defines the device port where the card reader is attached. For example, /dev/scmi2cn, where n is the nth Sun Internal Card Reader on the system. Note that no current systems have more than one internal reader, so /dev/scmi2c0 is the only choice now.

    -r MyInternalReader

    Specifies a unique name for the Sun Internal Card Reader.

    -n SunISCRI

    Indicates the model name for the Sun Internal Card Reader.

  4. Restart ocfserv.


    # svcadm restart network/rpc/ocfserv

    The ocfserv process is restarted the next time you use the Smartcard Console or execute the smartcard command.

ProcedureTo Add Internal Card Reader (Console)

Do the following to add an internal card reader from the Solaris Smartcard Console. You have to be root to perform this task.

Steps

  1. Verify that the ocfserv daemon is enabled.

    The following command provides the status of the service.


    % svcs network/rpc/ocfserv
    Note –

    Before you make any changes to Smartcard, you must make sure that the ocfserv daemon is enabled.

  2. (Optional) If necessary, as root, enable the ocfserv daemon.


    # svcadm enable network/rpc/ocfserv

  3. Start the Solaris Smartcard Console.

    Run sdtsmartcardadmin from the command line or select sdtsmartcardadmin from the Workspace menu.

  4. Click Card Readers in the Navigation pane.

  5. Double-click Add Reader in the Console pane.

    The Add Reader dialog box is displayed.

  6. Select the IFD Card Terminal Reader and click OK.

    The Card Readers: IFDTerminal dialog box is displayed, with the Basic Configuration tab selected.

  7. Select /dev/scmi2c0 from the Device Port pulldown menu.

    This port is for the internal reader.

  8. Enter the IFD handler location in the IFD Handler field.

    This is the full-path location of the IFD handler. The IFD handler for the internal reader is in /usr/lib/smartcard/ifdh_scmi2c.so.

  9. Click Apply or OK.

    The IFD Terminal is displayed in the Console pane. A dialog box is displayed, stating that the OCF Server must be restarted to complete the operation.

  10. Click Restart OCF Now to add the internal reader.

    The internal reader is not added until OCF is killed and restarted.

    Note –

    If you do not restart OCF now, you must restart OCF from the command line to add the internal reader.


    # svcadm restart network/rpc/ocfserv

    The ocfserv process is restarted the next time you start the Smartcard Console or execute the smartcard command.

Removing a Card Reader

You might need to remove an external card reader from a system when a user no longer needs to use a smart card, or when you want to move the card reader to another system. Be sure to remove the card reader logically before you disconnect the physical device. Refer to the following procedures:

ProcedureTo Remove a Card Reader (Console)

Steps

  1. Verify that the ocfserv daemon is enabled.

    The following command provides the status of the service.


    % svcs network/rpc/ocfserv
    Note –

    Before you make any changes to Smartcard, you must make sure that the ocfserv daemon is enabled.

  2. (Optional) If necessary, as root, enable the ocfserv daemon.


    # svcadm enable network/rpc/ocfserv

  3. Click Card Readers in the Navigation pane.

  4. In the Console pane, select the card reader that you want to remove.

  5. Choose Remove Terminal from the Action menu.

  6. Click OK.

    A dialog box is displayed, asking if you are sure you want to remove the card reader.

  7. Click OK.

    A dialog box is displayed, stating that the OCF Server must be restarted to complete the operation.

  8. Click Restart OCF Now or Don't Restart OCF.

    The IFD handler is not removed until OCF is restarted. The ocfserv process is restarted the next time you start the Smartcard Console or execute the smartcard command. You can explicitly restart OCF from the command line.

ProcedureTo Remove a Card Reader (Command Line)

Steps

  1. Verify that the ocfserv daemon is enabled.

    The following command provides the status of the service.


    % svcs network/rpc/ocfserv
    Note –

    Before you make any changes to Smartcard, you must make sure that the ocfserv daemon is enabled.

  2. (Optional) If necessary, as root, enable the ocfserv daemon.


    # svcadm enable network/rpc/ocfserv

  3. Remove the card reader.


    # smartcard -c admin -t terminal -r user_friendly_reader_name -x delete

  4. (Optional) Disconnect the external card reader from the port.

  5. Restart ocfserv.


    # svcadm restart network/rpc/ocfserv

    The ocfserv process is restarted the next time you use the Smartcard Console or execute the smartcard command.