JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Solaris Smartcard Administration Guide
search filter icon
search icon

Document Information

Preface

1.  Solaris Smartcard Overview

2.  Getting Started With Solaris Smartcard

3.  Adding or Removing a Card Reader

4.  Troubleshooting

Resolving Smartcard Login Problems

To Disable Smartcard

To Correct Smartcard Setup Problem

Resolving Applet, ATR, or Configuration Problems

Resolving Applet Downloading Problems

To Add a Missing ATR

To Resolve Configuration Problems

Debugging Smartcard

To Enable Debugging (Console)

To Enable Debugging (Command Line)

Glossary

Index

Resolving Applet, ATR, or Configuration Problems

You might have a problem downloading an applet to a smart card, adding support for a new type of card, or an illegal entry in your Solaris Smartcard configuration file.

Resolving Applet Downloading Problems

You might see the following message while trying to download the applet on the card:

SmartcardInvalidCardException

This message probably indicates that you have not added the ATR of the smart card inserted in the reader to the list of valid ATRs the system can accept. Try to update the card's ATR by following the steps in To Add Support for a New Card Type (Console).

To Add a Missing ATR

When you try to add a smart card in the Smartcard Console, a screen displays the ATR of the card inserted in the reader. If the ATR that is displayed does not exist in the list of valid ATRs, add the ATR to the card-name.ATR property.

For related information, see To Add Support for a New Card Type (Console), which provides Smartcard Console instructions and a command-line example.

  1. Verify that the ocfserv daemon is enabled.

    The following command provides the status of the service.

    % svcs network/rpc/ocfserv

    Note - Before you make any changes to Smartcard, you must make sure that the ocfserv daemon is enabled.


  2. (Optional) If necessary, as root, enable the ocfserv daemon.
    # svcadm enable network/rpc/ocfserv
  3. Display ocfserv properties to see if the card_name.ATR property exists.
    # smartcard -c admin

    For example, ocfserv lists a property MySCM.0.ATR, where MySCM is the user-friendly name of the card reader. This property reflects the ATR of the smart card that is inserted in the reader. This property is temporary. The property is added by ocfserv only for the time the card is in the reader. This property is removed when the card is removed.

  4. Add this ATR to the card_name.ATR property if the ATR displayed by this property does not exist in the list of valid ATRs.

To Resolve Configuration Problems

The /etc/smartcard/opencard.properties file stores important smart card configuration information. This file requires no administration. Do not edit this file manually. However, if you inadvertently introduced a problem in your smart card configuration, you can restore the previous version of /etc/smartcard/opencard.properties.

  1. Verify that the ocfserv daemon is enabled.

    The following command provides the status of the service.

    % svcs network/rpc/ocfserv

    Note - Before you make any changes to Smartcard, you must make sure that the ocfserv daemon is enabled.


  2. (Optional) If necessary, as root, enable the ocfserv daemon.
    # svcadm enable network/rpc/ocfserv
  3. Change to the /etc/smartcard directory.
  4. Save the current version first.
    # cp opencard.properties opencard.properties.bad
  5. Copy the previous version to the current version.
    # cp opencard.properties.bak opencard.properties