Initializing a Smart Card

After the default applet (SolarisAuthApplet) has been loaded, create the user profile information on the card. The user profile information specifies a login name and password for the card user. The user profile also names the protected application. The default PIN for the SolarisAuthApplet is $$$$java.

To Create User Information on a Smart Card (Command Line)

User information includes login name, password, and the application that the card provides access to.

1. Insert the card in the card reader.
2. Verify that the ocfserv daemon is enabled.

   The following command provides the status of the service.

   % svcs network/rpc/ocfserv

   ---

   Note - Before you make any changes to Smartcard, you must make sure that the ocfserv daemon is enabled.

   ---

3. (Optional) If necessary, as root, enable the ocfserv daemon.

   # svcadm enable network/rpc/ocfserv

4. Set the login name, password, and application for the card.

   Type the following on one line:

   # smartcard -c init -A A000000062030400 -P '$$$$java' user=me password=xx application=dtlogin

   This command is appropriate for all smart card devices that are supported by Solaris Smartcard.

   In this example, the user name is set to me, the password to xx, and the application is dtlogin. The user name and password can be set to any value. The user name and password can be changed by a system administrator or by the user when the card is issued. See To Set Up a User Profile (Console) for instructions.

   ---

   Note - You must enter the loaded applet ID and the current PIN. The -A A000000062030400 part of the command specifies the SolarisAuthApplet applet ID. You must enclose the default PIN, $$$$java, or any PIN containing shell special characters—such as $—within single quotes. Otherwise, the shell tries to interpret the PIN as a variable, and the command fails.

   ---

See Also

For Smartcard Console instructions, see the following:

• To Set Up a User Profile (Console)

• To Change the PIN on a Card (Console)