How to load .cap on a smart card

Hi everybody!
I am very confused with java cards. I wrote an applet for java card. Tried it in Eclipse+JCWDE. Send some APDUs to it with apdutool.bat. Works fine!
However, I want to go further and try it on a real smart card. The only problem is I do not know how to load .cap file onto my card. I tried to find some forums, references or something like that, but all I found was "I tried to load, but get error" or something like that.
I use JCOP tool for Eclipse (if that to any help)
Can someone explaine to me how loading works in princip? Is their any classes that can be used to simplify the task?
Any help is appreciated
/L

Yes, of course. Absolutely normal .zip file.
I can print the content of file load.jcsh here:
# /set-var path d:/Wi-Fi/javacard/download/eappsk32k
#Switch trace mode on and connect to a PC/SC smart card reader
/mode trace=on
/terminal
#Reset the card (request ATR) and select the CardManager
/card
#Set the keys in key set 255 of the JCShell for authentication later on
set-key 255/1/DES-ECB/404142434445464748494A4B4C4D4E4F
set-key 255/2/DES-ECB/404142434445464748494A4B4C4D4E4F
set-key 255/3/DES-ECB/404142434445464748494A4B4C4D4E4F
#Begin authentication using the appropriate key set
init-update 255
#Complete authentication
ext-auth
#Display the card registry to check if the applet is loaded and installed
card-info
#delete 11223344556601
#delete 112233445566
card-info
#Upload the package holding the applet
upload ${path}openeapsmartcard.cap
#Install the applet in the package
install 112233445566 11223344556601
#Display the card registry to check if the applet is loaded and installed
card-info You should make some substitutes for your project.

Similar Messages

Loading Applet on a Smart Card

I am new to JavaCard development so forgive me if you find the question stupid.
I am trying to load an applet on a NXP based Sm@rtCafe Expert card. I have completed the following steps:
- Compiled the applet
- Converted the package into a cap file using the Converter tool.
- Generated the upload scrpit file using the scriptgen tool and appended the requisite powerup and powerdown commands.
Now when I try to upload the applet through the apdutool, I get an exception.
Here is the apdutool command I am using:
apdutool -t0 upload
Where upload is the name of my script file.
I am getting the following exception:
Opening connection to localhost on port 9025.
java.net.ConnectException: Connection refused: connect
So my card reader is probably not on the default port is what I gather. How do I find out what port is my reader at if that is the problem.
For additional information I am using JavaCard 2.2.2 development kit along with JDK1.5. My card reader is a USB based SCR3310 reader manufacture by SCM Microsystems.
Any help in this regard will be greatly appreciated.
Thanks.

hi
1- for Sending commands to a PC/SC-compatible card reader with apdutool, you have to use pcsc command line option , apdutool -pcsc
you need to configure pcsc Functionality. refer to
java card dev kit2.2.2 user guide, page 10,11.
2 - The sun JavaCard Development Kit can only be used for testing applets in a simulated environment, it does not allow you to load applets to a physical card. Most cards use the GlobalPlatform specification for content management.
Best regards,
siavash

How to sign PDF with a smart card or USB token in C# through IAC ?

Hi,
My goal is to apply a certification signature (MDP) to a PDF document with a smart card (Belgium identity card) from a C# application.
I start Acrobat through IAC.
The JavaScript object apparently can only sign with PKCS12 file (.pfx)...
To sign a PDF with a smart card I need to develop a plug-in if I am right?
The samples in the SDK are to get a certificate from the windows certificate store or to write a Third party handler.
I already get the certificate context (an HCRYPPROV object from windows certificate store)
How can I create a signature field but mostly sign it? With DigSig I guess, but I’m lost in the API… does
I have to use DigSigSignDoc ?
Syntax : void DigSigSignDoc(PDDoc pdDoc, CosObj sigField, ASAtom filterKey)
The filterKey value for the windows certificate store is “Adobe.PPKMS” but how can I choose my certificate?
I also have to build a signature reference dictionary i guess?
What does i have to do and in which order? I can't find any documentation on this.
There is a more simple way?
Thank you,
Goffin
Fabian

Hi,
-download the JDK sample "sdkAddSignature.js"
-change the sign methode like this :
Sign = app.trustedFunction (
    function( sigField, DigSigHandlerName )
   try {
   app.beginPriv();
   //the diSigHandler is "Adobe.PPKLite"
   var myEngine = security.getHandler(DigSigHandlerName);
   var ids = myEngine.digitalIDs;
   //choose an id which is installed in the microsoft store
var oCert = ids.certs[3];
// for (var i=0; i<ids.certs.length; i++)
// console.println("certificat n°"+ i + " " +ids.certs[i]);
var oParams = {cPassword:"0000" , oEndUserSignCert:oCert }
if(myEngine.login({cPassword:"0000",oParams:oParams,bUI:false}))
   console.println("OK");
else
   console.println("Error");
console.println("sigfield :" + sigField);
sigField.signatureSign({oSig: myEngine,oInfo: { password: "0000",reason: ACROSDK.sigReason,location: ACROSDK.sigLocation,contactInfo: ACROSDK.sigContactInfo}});
app.endPriv
   } catch (e) {
   console.println("An error occurred: " + e);
-perform some test using the javascript debugger
-and finally use IAC to execute the script

Verify user pin on a smart card & load a cap file on a card (with eclipse)

I have been able install JCWDE (Java card development Kit) successfully on eclipse.Basically all I need to do is verify user pin on a smart card.As in first set a pin and then verify it.
To begin with I have referred many tutorials (here: http://www.javaworld.com/jw-07-1999/jw-07-javacard.html?page=1) and implemented the wallet code in eclipse.I have the cap file generated and the scripts generated.I am not sure how to load it on the smart card with eclipse.
I tried to deploy the cap file but it keeps saying connected.Also when we initiate the applet I get the same result.
output:
Java Card 2.2.2 APDU Tool, Version 1.3
Copyright 2005 Sun Microsystems, Inc. All rights reserved. Use is subject to license terms.
Opening connection to localhost on port 9032.
Connected.
I have also tried : http://www.cs.ru.nl/E.Poll/hw/practical.html ........ but no luck.
I have the wallet.cap ,wallet.exp ,wallet.jca ,wallet.opt create.script, select,cap-download.scripts files already generated in eclipse.
How does a successfully implemented applet code on a smart card work?How does this wallet code work if it is successfully implemented ? Does it have like some GUI which prompts the user to enter the pin?
Wallet code for reference :
package com.sun.javacard.samples.wallet;
import javacard.framework.*;
public class Wallet extends Applet {
/* constants declaration */
// code of CLA byte in the command APDU header
final static byte Wallet_CLA =(byte)0x80;
// codes of INS byte in the command APDU header
final static byte VERIFY = (byte) 0x20;
final static byte CREDIT = (byte) 0x30;
final static byte DEBIT = (byte) 0x40;
final static byte GET_BALANCE = (byte) 0x50;
// maximum balance
final static short MAX_BALANCE = 0x7FFF;
// maximum transaction amount
final static byte MAX_TRANSACTION_AMOUNT = 127;
// maximum number of incorrect tries before the
// PIN is blockedd
final static byte PIN_TRY_LIMIT =(byte)0x03;
// maximum size PIN
final static byte MAX_PIN_SIZE =(byte)0x08;
// signal that the PIN verification failed
final static short SW_VERIFICATION_FAILED =
0x6300;
// signal the the PIN validation is required
// for a credit or a debit transaction
final static short SW_PIN_VERIFICATION_REQUIRED =
0x6301;
// signal invalid transaction amount
// amount > MAX_TRANSACTION_AMOUNT or amount < 0
final static short SW_INVALID_TRANSACTION_AMOUNT = 0x6A83;
// signal that the balance exceed the maximum
final static short SW_EXCEED_MAXIMUM_BALANCE = 0x6A84;
// signal the the balance becomes negative
final static short SW_NEGATIVE_BALANCE = 0x6A85;
/* instance variables declaration */
OwnerPIN pin;
short balance;
private Wallet (byte[] bArray,short bOffset,byte bLength) {
// It is good programming practice to allocate
// all the memory that an applet needs during
// its lifetime inside the constructor
pin = new OwnerPIN(PIN_TRY_LIMIT, MAX_PIN_SIZE);
byte iLen = bArray[bOffset]; // aid length
bOffset = (short) (bOffset+iLen+1);
byte cLen = bArray[bOffset]; // info length
bOffset = (short) (bOffset+cLen+1);
byte aLen = bArray[bOffset]; // applet data length
// The installation parameters contain the PIN
// initialization value
pin.update(bArray, (short)(bOffset+1), aLen);
register();
} // end of the constructor
public static void install(byte[] bArray, short bOffset, byte bLength) {
// create a Wallet applet instance
new Wallet(bArray, bOffset, bLength);
} // end of install method
public boolean select() {
// The applet declines to be selected
// if the pin is blocked.
if ( pin.getTriesRemaining() == 0 )
return false;
return true;
}// end of select method
public void deselect() {
// reset the pin value
pin.reset();
public void process(APDU apdu) {
// APDU object carries a byte array (buffer) to
// transfer incoming and outgoing APDU header
// and data bytes between card and CAD
// At this point, only the first header bytes
// [CLA, INS, P1, P2, P3] are available in
// the APDU buffer.
// The interface javacard.framework.ISO7816
// declares constants to denote the offset of
// these bytes in the APDU buffer
byte[] buffer = apdu.getBuffer();
// check SELECT APDU command
if (apdu.isISOInterindustryCLA()) {
if (buffer[ISO7816.OFFSET_INS] == (byte)(0xA4)) {
return;
} else {
ISOException.throwIt (ISO7816.SW_CLA_NOT_SUPPORTED);
// verify the reset of commands have the
// correct CLA byte, which specifies the
// command structure
if (buffer[ISO7816.OFFSET_CLA] != Wallet_CLA)
ISOException.throwIt(ISO7816.SW_CLA_NOT_SUPPORTED);
switch (buffer[ISO7816.OFFSET_INS]) {
case GET_BALANCE:
getBalance(apdu);
return;
case DEBIT:
debit(apdu);
return;
case CREDIT:
credit(apdu);
return;
case VERIFY:
verify(apdu);
return;
default:
ISOException.throwIt(ISO7816.SW_INS_NOT_SUPPORTED);
} // end of process method
private void credit(APDU apdu) {
// access authentication
if ( ! pin.isValidated() )
ISOException.throwIt(SW_PIN_VERIFICATION_REQUIRED);
byte[] buffer = apdu.getBuffer();
// Lc byte denotes the number of bytes in the
// data field of the command APDU
byte numBytes = buffer[ISO7816.OFFSET_LC];
// indicate that this APDU has incoming data
// and receive data starting from the offset
// ISO7816.OFFSET_CDATA following the 5 header
// bytes.
byte byteRead =
(byte)(apdu.setIncomingAndReceive());
// it is an error if the number of data bytes
// read does not match the number in Lc byte
if ( ( numBytes != 1 ) || (byteRead != 1) )
ISOException.throwIt(ISO7816.SW_WRONG_LENGTH);
// get the credit amount
byte creditAmount = buffer[ISO7816.OFFSET_CDATA];
// check the credit amount
if ( ( creditAmount > MAX_TRANSACTION_AMOUNT)
|| ( creditAmount < 0 ) )
ISOException.throwIt(SW_INVALID_TRANSACTION_AMOUNT);
// check the new balance
if ( (short)( balance + creditAmount) > MAX_BALANCE )
ISOException.throwIt(SW_EXCEED_MAXIMUM_BALANCE);
// credit the amount
balance = (short)(balance + creditAmount);
} // end of deposit method
private void debit(APDU apdu) {
// access authentication
if ( ! pin.isValidated() )
ISOException.throwIt(SW_PIN_VERIFICATION_REQUIRED);
byte[] buffer = apdu.getBuffer();
byte numBytes =
(byte)(buffer[ISO7816.OFFSET_LC]);
byte byteRead =
(byte)(apdu.setIncomingAndReceive());
if ( ( numBytes != 1 ) || (byteRead != 1) )
ISOException.throwIt(ISO7816.SW_WRONG_LENGTH);
// get debit amount
byte debitAmount = buffer[ISO7816.OFFSET_CDATA];
// check debit amount
if ( ( debitAmount > MAX_TRANSACTION_AMOUNT)
|| ( debitAmount < 0 ) )
ISOException.throwIt(SW_INVALID_TRANSACTION_AMOUNT);
// check the new balance
if ( (short)( balance - debitAmount ) < (short)0 )
ISOException.throwIt(SW_NEGATIVE_BALANCE);
balance = (short) (balance - debitAmount);
} // end of debit method
private void getBalance(APDU apdu) {
byte[] buffer = apdu.getBuffer();
// inform system that the applet has finished
// processing the command and the system should
// now prepare to construct a response APDU
// which contains data field
short le = apdu.setOutgoing();
if ( le < 2 )
ISOException.throwIt(ISO7816.SW_WRONG_LENGTH);
//informs the CAD the actual number of bytes
//returned
apdu.setOutgoingLength((byte)2);
// move the balance data into the APDU buffer
// starting at the offset 0
buffer[0] = (byte)(balance >> 8);
buffer[1] = (byte)(balance & 0xFF);
// send the 2-byte balance at the offset
// 0 in the apdu buffer
apdu.sendBytes((short)0, (short)2);
} // end of getBalance method
private void verify(APDU apdu) {
byte[] buffer = apdu.getBuffer();
// retrieve the PIN data for validation.
byte byteRead = (byte)(apdu.setIncomingAndReceive());
// check pin
// the PIN data is read into the APDU buffer
// at the offset ISO7816.OFFSET_CDATA
// the PIN data length = byteRead
if ( pin.check(buffer, ISO7816.OFFSET_CDATA,
byteRead) == false )
ISOException.throwIt(SW_VERIFICATION_FAILED);
} // end of validate method
} // end of class Wallet
Any help on this would highly appreciated !! :)

Hi,
Thanks a lot for reply.But I am not sure as to how can I delete the simulator.
All I want to do is write a pin on the smart card and verify it.But I am not being able to deploy the cap file or initiate the applet.
Also for passing the pin correct me if I am wrong........ according to what you said and what I have understood
If the code is like this :
public static void install(byte[] bArray, short bOffset, byte bLength) {
// create a Wallet applet instance
new Wallet(bArray, bOffset, bLength);
} // end of install method
byte aLen = bArray[bOffset]; // applet data length
// The installation parameters contain the PIN
// initialization value
pin.update(bArray, (short)(bOffset+1), aLen);
Lets say my pin is : 1234
then I would pass it here.....
new Wallet(bArray, 1234, bLength);

How to load a java card applet into a java card

Dear All,
I am a novice to java card technology..
I have done some search on how to load a java card applet into a smart card but haven't found a satisfactory answer. I have read about installer.jar and scriptgen tool but I want to load the applet from a java program and not from command line. It would be of great help if somebody can help me out.
If somebody can share a sample program which load a javacard applet(.CAP file) into a smart card, I will be very thankful.
I am able to find some client applications which help us send APDU commands and recieve response APDU's to interact with an applet loaded on to the smart card but not application which actually load the applet.
I have heard of OCF and GP.. some say that OCF technology is outdated and no longer in use.. can somebosy throw some light on this too..
cheers,
ganesh

hi siavash,
thanks for the quick response.. i checked out GPShell as suggested, it looked like a tool by which one can load an applet on to card and send some sample apdu commands... but I want to load the applet from the code.
My application should look something like this.. it will be a swing applicaton where I have a drop down with a list of readers, I select the one desired and then click on "LOAD" after inserting a blank java card, at this point my applet which is stored in my DB should get loaded on to the java card. The next step should be to personalize it where I enter the values for the static variables of my applet and click "PERSONALIZE", at this point all these values should be embedded into APDU commands and sent to the java card for processing.
For achieving this I am yet to find a comprehensive sample or documentation on the net.
Please help...
regards,
ganesh

Urgent Help on Smart Card

Hi Friends
I have a javacard application which write and reads to/from the smartcard.My card supports Javacard 2.2.1 and GP 2.1.1 ,but from my experience it seems no supporting GP( it is not working GPShell sowing 6d00 error and also giving error under mode_211)
I converted my class file to a cap file .I was using Netbeans.Now i changed to Eclipse (galileo_jee) with Eclipsejcde plugin.I can convert to cap file from eclipse.I use compiler options as :
Compiler Compliance level 1.3
Source code compatibility 1.3
Generated .class file compatibilty 1.1
We can convert to a cap file through eclipse .I can run GPShell script (Ant script) using Eclipse and load the cap file to the smart card, but when i ran the following script .I am getting 6d00 error .
So I moved to Smart card shell(SC Shell):
It contains some javascript function to install the cap file to smart acrd and read some messages from FORUM that some peoples have successfully installed using Smart Card Shell.When i tried to install my cap file it is loading the file to smart card(I am able to see) ,but giving an error message at the end of install method as 6A80.The APDU trace i have pasted next message.Continue....
Thanks

Please note : Followed from 1st message...
00 C: 00 A4 04 00 - SELECT Lc=8
0005 A0 00 00 00 03 00 00 00 ........
Le=0
R: SW1/SW2=9000 (Normal processing: No error) Lr=27
0000 6F 19 84 08 A0 00 00 00 03 00 00 00 A5 0D 9F 6E o........... ..n
0010 06 10 01 76 DE 00 05 9F 65 01 7F ...v ...e..
00 C: 80 50 00 00 - UNKNOWN_INS Lc=8
0005 C1 A2 EF A2 26 4F 8F 06 &O..
Le=0
R: SW1/SW2=9000 (Normal processing: No error) Lr=28
0000 00 00 71 18 02 02 1D 3D 33 F6 FF 01 6E D2 BC C7 ..q....=3 .nҼ
0010 4B B3 B9 43 40 2F 7F D2 EB CF 5D FB K C@/. ] 00 C: 84 82 00 00 - UNKNOWN_INS Lc=16
0005 64 EC 0F 28 6E F8 3A 80 DD B7 4D 8E BA A9 36 09 d .(n :.ݷM. 6.
R: SW1/SW2=9000 (Normal processing: No error) Lr=0
00 C: 80 E4 00 00 - UNKNOWN_INS Lc=14
0005 4F 0C 01 02 03 04 05 06 07 08 09 00 00 01 O.............
Le=0
R: SW1/SW2=6A88 (Checking error: Reference data not found) Lr=0
00 C: 80 E4 00 00 - UNKNOWN_INS Lc=12
0005 4F 0A 01 02 03 04 05 06 07 08 09 00 O...........
Le=0
R: SW1/SW2=9000 (Normal processing: No error) Lr=0
00 C: 80 E6 02 00 - UNKNOWN_INS Lc=23
0005 0A 01 02 03 04 05 06 07 08 09 00 08 A0 00 00 00 ................
0015 03 00 00 00 00 00 00 .......
Le=0
R: SW1/SW2=9000 (Normal processing: No error) Lr=0
00 C: 80 E8 00 00 - UNKNOWN_INS Lc=255
0005 C4 82 02 9D 01 00 14 DE CA FF ED 01 02 04 00 01 ...... .....
0015 0A 01 02 03 04 05 06 07 08 09 00 02 00 1F 00 14 ................
0025 00 1F 00 0F 00 0B 00 3E 00 0E 01 2A 00 0A 00 23 .......>...*...#
0035 00 00 00 8F 00 02 00 00 00 00 01 01 00 04 00 0B ................
0045 01 02 01 07 A0 00 00 00 62 01 01 03 00 0F 01 0B ........b.......
0055 01 02 03 04 05 06 07 08 09 00 00 00 08 06 00 0E ................
0065 00 80 03 00 FF 00 07 02 00 00 00 1C 01 0D 07 01 .... ...........
0075 2A 00 01 10 18 8C 00 00 7A 02 30 10 09 90 0B 7F *.......z.0.....
0085 00 01 8F 00 02 3D 8C 00 03 8B 00 04 7A 02 21 19 .....=......z.!.
0095 8B 00 05 2D 1A 03 25 10 80 6B 28 1A 04 25 73 00 ...-..%..k(..%s.
00A5 1B 00 02 00 04 00 0D 00 1B 00 14 18 19 8C 00 06 ................
00B5 70 17 18 19 8C 00 07 70 10 11 6D 00 8D 00 08 70 p......p..m....p
00C5 08 11 6E 00 8D 00 08 7A 04 23 19 8B 00 05 2D 1A ..n....z.#....-.
00D5 05 25 60 08 11 6B 00 8D 00 08 1A 06 25 11 00 FF .%`..k......%..
00E5 53 32 1F 10 09 6C 08 11 6B 00 8D 00 08 1A 07 25 S2...l..k......%
00F5 11 00 FF 53 29 04 16 04 10 09 6F 08 11 67 00 .. S).....o..g.
Le=0
R: SW1/SW2=9000 (Normal processing: No error) Lr=0
00 C: 80 E8 00 01 - UNKNOWN_INS Lc=255
0005 8D 00 08 16 04 61 08 11 67 00 8D 00 08 19 8B 00 .....a..g.......
0015 09 3B 19 16 04 8B 00 0A 19 7B 00 01 1F 16 04 8B .;.......{......
0025 00 0B 7A 05 23 19 8B 00 05 2D 1A 05 25 60 08 11 ..z.#....-..%`..
0035 6B 00 8D 00 08 1A 06 25 11 00 FF 53 32 1F 10 09 k......%.. S2...
0045 6C 08 11 6B 00 8D 00 08 1A 07 25 11 00 FF 53 29 l..k......%.. S)
0055 04 16 04 10 09 6F 08 11 67 00 8D 00 08 16 04 61 .....o..g......a
0065 08 11 67 00 8D 00 08 18 19 8B 00 0C 1A 08 7B 00 ..g...........{.
0075 01 1F 16 04 8D 00 0D 3B 11 90 00 8D 00 08 7A 02 .......;......z.
0085 22 19 8B 00 05 2D 1A 07 25 11 00 FF 53 32 1F 19 "....-..%.. S2..
0095 8B 00 0E 6A 08 11 67 00 8D 00 08 7A 08 00 0A 00 ...j..g....z....
00A5 02 00 01 00 00 00 00 00 00 05 00 3E 00 0F 06 80 ...........>....
00B5 03 00 05 00 00 00 01 00 00 00 06 00 00 01 03 80 ................
00C5 03 01 03 80 0A 01 06 00 00 57 06 00 00 B1 06 80 .........W... ..
00D5 07 01 03 80 0A 07 03 80 0A 09 03 80 0A 05 03 00 ................
00E5 00 08 06 80 10 01 03 80 0A 06 09 00 23 00 00 00 ............#...
00F5 1F 05 0A 03 04 03 07 1D 07 08 08 07 0C 13 15 ...............
Le=0
R: SW1/SW2=9000 (Normal processing: No error) Lr=0
00 C: 80 E8 80 02 - UNKNOWN_INS Lc=163
0005 0A 04 07 04 06 07 0C 13 15 0A 05 05 06 07 07 0E ................
0015 08 0B 00 8F 01 00 01 00 00 00 00 01 00 06 FF 08 .............. .
0025 00 00 00 00 22 FF 82 00 01 00 20 00 05 00 00 00 ...." .... .....
0035 00 00 09 00 08 00 33 00 12 00 00 00 00 07 01 00 ......3.........
0045 1C 00 24 00 39 00 00 00 00 FF 02 00 57 00 24 00 ..$.9.... ..W.$.
0055 58 00 00 00 00 FF 02 00 B1 00 24 00 5A 00 00 00 X.... .. .$.Z...
0065 00 08 01 01 0D 00 24 00 1B 00 00 00 00 00 0F 00 ......$.........
0075 20 00 22 FF FF 00 20 00 20 00 22 00 24 00 24 00 ." . . .".$.$.
0085 28 00 2A 00 28 00 2C 00 24 00 2F 00 2A 01 10 01 (.*.(.,.$./.*...
0095 B0 06 68 00 A1 02 41 01 40 04 B4 41 06 B4 B4 44 .h. .A.@. A. D
00A5 04 B4 31 . 1
Le=0
R: SW1/SW2=9000 (Normal processing: No error) Lr=0
00 C: 80 E6 0C 00 - UNKNOWN_INS Lc=42
0005 0A 01 02 03 04 05 06 07 08 09 00 0B 01 02 03 04 ................
0015 05 06 07 08 09 00 00 0C 01 02 03 04 05 06 07 08 ................
0025 09 00 00 01 01 07 02 C9 00 00 ....... ..
Le=0
R: SW1/SW2=6A80 (Checking error: Incorrect parameter in the command data field) Lr=0
Please help me reagrding this.Fighting with this over 1 month.Someone Kindly help me to solve this error.I tried the following:
1) I have read from some forum that if we replace the import.cap with original import.cap file,it will solve the probs.Eventhough it is not the rite method , i thought i can use it now.My import.cap file will be having the content as below.
04 00 0b 01 02 01 07 a0 00 00 00 62 01 01 and the original cap file will be having 04 00 0b 01 00 01 07 a0 00 00 00 62 01 01
2) Checked the applet and package AIDs are same.
3) Checked with the empty methods (without any code in the applet file).had register method in applet constructor also called constructor from install method.
4)Checked from command prompt ,same problem exist.
Can anybody help please.i m really in trouble.My time is limited .Please go through my code.In next post ,i will post my code also and missing anything .If anybody wants to test cap file,i wills send tha cap file also.

Smart Card on Elevated Permissions

I'm setting up a QA Web server on a virtual server and having trouble with the Smart Card (this is in order to upgrade from Win03 to Win12 in production). I've been able to bypass the log on with no issue. I've disabled UAC down to the registry level. However,
I need to recover my private key on a web certificate. To do so, you use CertUtil -repairstore <serial>. When you do this, it is prompting me to insert a smart card for elevated permission (even though I'm running cmd as admin and logged in as admin).
I haven't been able to find, anywhere, how I can either bypass this or change the prompt to enter credentials. The only option the smart card prompt offers me is "ok" and "cancel" - since it's a virtual machine (and since I don't have a
smart card) there is no option for me to insert one. Clicking ok does nothing and clicking cancel causes CertUtil to fail with "access denied" (as I would imagine it would).
Does anyone know how I can either bypass the smart card prompt or change the prompt to allow for credentials to be entered? I've been Google'ing for days now and feel myself dying a little bit with every search...

Hi Gesoss,
Please grant "Issue and Manage Certificates" for your current account
then try again.
The related KB:
Checklist: Configure CAs to Issue and Manage Certificates
http://technet.microsoft.com/en-us/library/cc771533.aspx
I’m glad to be of help to you!
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to load the .cap file in a Smart Card?

Dear All,
Hello..!!
I am using JCDK 2.2 and have used Eclipse JCDK.
I have written a simple read/write applet and created a .cap file using Eclipse's Converter Java Card tool.
What is the next step to be done?
I have a smart card device and have installed its drivers.
When do the APDU commands come into picture?
Expecting help.
Thanks a lot.
Regards,
Suril

Suril Sarvaiya wrote:
Hi Shane....
Thnx a lot....
I have downloaded GP-Shell 1.4.4
When I open its application and write any command and press enter ; the app window closes immendiately.
Can you please help me on this?
One more thing Shane......
I'm writig a java class using javax.smartcardio
I have installed drivers of Omnikey 3021
but the TerminalFactory is not detecting it?
Any idea on that?
Thanks again...
Regards,
SurilHi all,
Is Mr. thread starter has solved his problem?
I profit this thread to post my question. I'm working with new environment and I have problem loading cap file into my smartcard.
specification come first :-)
- My smartcard is said to be JC2.2.1 and GP2.1.1 compatible
- My code (for testing) is written in Java under eclipse Helios service 2 with JavaCard plugin (for JC2.2.2)
I compile my code with JDK 1.3 (for compatible version) and using the JC plugin to generate cap file (along with exp and jca).
My problem is exactly the same as one that was posted in this forum about 2 years ago but is not answered :-)
[Problem Loading Application to Card |http://forums.oracle.com/forums/thread.jspa?threadID=1749334&tstart=420]
+ I successfully authenticate with smartcard
+ APDU command Install for Load is executed successfully
+ BUT the APDU command LOAD file fails with returned status word is 6424
For details, I post here my javacard applet code and APDU command executed with my tool:
package mksAuthSys;
import javacard.framework.APDU;
import javacard.framework.Applet;
import javacard.framework.ISO7816;
import javacard.framework.ISOException;
import javacard.framework.OwnerPIN;
public class Jcardlet extends Applet {
     private final static byte[] myPIN = { (byte) 0x01, (byte) 0x02, (byte) 0x03, (byte) 0x04};
     final static byte Jcardlet_CLA =(byte)0xB0;
     final static byte VERIFY = (byte) 0x20;
     final static byte PIN_TRY_LIMIT =(byte)0x03;
     final static byte MAX_PIN_SIZE =(byte)0x08;
     final static short SW_VERIFICATION_FAILED = 0x6300;
     OwnerPIN pin;
     private Jcardlet() {
          pin = new OwnerPIN(PIN_TRY_LIMIT, MAX_PIN_SIZE);
          pin.update(myPIN, (byte) 0, (byte) 4 );
         register();
     public static void install(byte bArray[], short bOffset, byte bLength)
               throws ISOException {
          new Jcardlet().register();
     public boolean select() {
          if ( pin.getTriesRemaining() == 0 ) return false;
         return true;
     public void deselect(){
          pin.reset();
     //@Override
     public void process(APDU apdu) throws ISOException {
          // TODO Auto-generated method stub
          byte[] buffer = apdu.getBuffer();
          if ((buffer[ISO7816.OFFSET_CLA] == 0) &&
                  (buffer[ISO7816.OFFSET_INS] == (byte)(0xA4))) return;
          if (buffer[ISO7816.OFFSET_CLA] != Jcardlet_CLA)
                ISOException.throwIt(ISO7816.SW_CLA_NOT_SUPPORTED);
          switch (buffer[ISO7816.OFFSET_INS]) {
           case VERIFY: verify(apdu);
             return;
           default: ISOException.throwIt (ISO7816.SW_INS_NOT_SUPPORTED);
     private void verify(APDU apdu) {
          // TODO Auto-generated method stub
         byte[] buffer = apdu.getBuffer();
         // retrieve the PIN data for validation.
         byte byteRead = (byte)(apdu.setIncomingAndReceive());
         // check pin
         // the PIN data is read into the APDU buffer
         // at the offset ISO7816.OFFSET_CDATA
         // the PIN data length = byteRead
         if ( pin.check(buffer, ISO7816.OFFSET_CDATA,byteRead) == false )
           ISOException.throwIt(SW_VERIFICATION_FAILED);
}And my APDU command:
Loading "D:\mksAuthSys.cap" ...
T - 80F28000024F00
C - 08A000000003000000079E9000
ISD AID : A000000003000000
T - 80E602001508F23412345610000008A00000000300000000000000
C - 009000
T - 80E80000C8C482018B010012DECAFFED010204000108F23412345610000002001F0012001F000C001500420012009D0011001C0000009F00020001000402010004001502030107A0000000620101000107A000000062000103000C0108F234123456100001002306001200800301000104040000003DFFFF0030004507009D000510188C0003188F00013D0610088C00028700AD007B000403078B0005188B00067A02308F00073D8C00088B00067A0110AD008B00096104037804780110AD008B000A7A0221198B000B2D1A0300
C - 6424
Stopped loading due to unexpected status words.Urgently look forward to hearing from you.
Thanks a bunch in advance
Best Regards,
JDL

How to load applet to smart card.

I'm new in smart card world and at this moment try to run examples.
I have java_card_kit-2_2_2-windows and GPShell-1.4.2
I have successfuly run all examples from card kit with use of cref (emulator) and now I whant to run simple example with real card.
I have a card reader: CardMan 3x21 (USB)
In diagnostic tool it shows me card ATR: 3B 69 00 FF 4A 43 4F 50 32 31 56 32 32
Protocol T=0
But I can find this ATR in smartcard_list.txt (http://ludovic.rousseau.free.fr/softwares/pcsc-tools/smartcard_list.txt)
The most closest match
3B 66 00 FF 4A 43 4F 50 33 30
JCOP30 "OP-DI 16k VISA v2 (JCOP30) ORGA"
I suspect that I have JCOP21 ORGA card (from my customer info)
1) When I try to run GPShell HelloInstall.txt the scrip executed until insatll aplet
it writes error messge: "reference data not found..."
2) With apdutool from card kit I cant even connect to card reade...
Could any body sugest me what I should try next?

Hello all!
I gain some progress by my self, but still has questions.
1) Form card manufacturer I get that I have following card:
JCOP 21 v2.2:
ISO7816
JavaCard 2.2.1, GlobalPlatform: 2.1.1
EEPROM: 36kb
RAM: 3kb
2) I can run some scripts with GPShell 1.4.2
Here dump for geting CPLC info
mode_211
enable_trace
establish_context
card_connect
* reader name OMNIKEY CardMan 3x21 0
send_apdu -sc 0 -APDU 80CA9F7F00
* Command --> 80CA9F7F00
* Wrapped command --> 80CA9F7F00
Response <-- 9F7F2A479051144051515824006334008574910828481063414F5A70810C2A5E303835373400000000000000009000
card_disconnect
release_context
BUT when I try to install HelloWorld.cap (compiled with Sun Java Dev Card Kit) I get an error, Here the dump for helloInstallGP211.txt:
mode_211
enable_trace
establish_context
card_connect
* reader name OMNIKEY CardMan 3x21 0
select -AID a000000003000000
Command --> 00A4040008A000000003000000
Wrapped command --> 00A4040008A000000003000000
Response <-- 6F108408A000000003000000A5049F6501FF9000
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4e4f // Open secure channel
Command --> 80CA006600
Wrapped command --> 80CA006600
Response <-- 664C734A06072A864886FC6B01600C060A2A864886FC6B02020101630906072A864886FC6B03640B06092A864886FC6B040215650B06092B8510864864020103660C060A2B060104012A026E01029000
Command --> 8050000008CD0C9119FE40284200
Wrapped command --> 8050000008CD0C9119FE40284200
Response <-- 00006334008574910828FF0200195EE3440DED201097D97CE9A1EFBB9000
Command --> 84820100103151BFEE8E943D724C52BB5CBAEB9B58
Wrapped command --> 84820100103151BFEE8E943D724C52BB5CBAEB9B58
Response <-- 9000
delete -AID a00000006203010c0101
Command --> 80E400800C4F0AA00000006203010C010100
Wrapped command --> 84E40080144F0AA00000006203010C010109F87161B011ED0B00
Response <-- 6A88
delete_applet() returns 0x80206A88 (6A88: Referenced data not found.)
delete -AID a00000006203010c01
Command --> 80E400800B4F09A00000006203010C0100
Wrapped command --> 84E40080134F09A00000006203010C01A50B15072D4EC04E00
Response <-- 6A88
delete_applet() returns 0x80206A88 (6A88: Referenced data not found.)
install -file HelloWorld.cap -nvDataLimit 2000 -instParam 00 -priv 2
file name HelloWorld.cap
Command --> 80E602002009A00000006203010C0108A000000003000000000AEF08C60201B0C80207D00000
Wrapped command --> 84E602002809A00000006203010C0108A000000003000000000AEF08C60201B0C80207D000F8A03543D4C4DFF400
Response <-- 009000
Command --> 80E80000EFC48201A5010013DECAFFED010204000109A00000006203010C0102001F0013001F000E00150036000C0067000A00130000006C00000000000002010004001502030107A0000000620101000107A000000062000103000E010AA00000006203010C0101001406000C00800301000107010000001F070067000210188C000118110100900B8700188B00027A02308F00033D8C00043B7A0523198B00052D198B0006320329041F651B1A08AD0016041F8D00073B16041F41290419088B00083270E6198B00093B19160408418B000A1903088B000B19AD000316048B000C7A08000A0000000000000000000005003600
Wrapped command --> 84E80000F7C48201A5010013DECAFFED010204000109A00000006203010C0102001F0013001F000E00150036000C0067000A00130000006C00000000000002010004001502030107A0000000620101000107A000000062000103000E010AA00000006203010C0101001406000C00800301000107010000001F070067000210188C000118110100900B8700188B00027A02308F00033D8C00043B7A0523198B00052D198B0006320329041F651B1A08AD0016041F8D00073B16041F41290419088B00083270E6198B00093B19160408418B000A1903088B000B19AD000316048B000C7A08000A0000000000000000000005003600E276C3872CCE4ACF
Response <-- 6A80
load_applet() returns 0x80206A80 (6A80: Wrong data / Incorrect values in command data.)
Does any body nows why this script failed? OR I should write bug report for GPShell ?
Alexey.

How to load a .cap file

i am new to smartcard programming...
now i am able to compile sample card program and and generated .cap file.
now my question is how to load that .cap file onto simulator and also smartcard.
my requirement is to store some value on smart card and retrive that value and update it. what is the process to achive this.plz mail me in detail to my id : [email protected] or [email protected]
advance thanks for mailing to me ....

i am new to smartcard programming...
now i am able to compile sample card program and and generated .cap file.
now my question is how to load that .cap file onto simulator and also smartcard.
my requirement is to store some value on smart card and retrive that value and update it. what is the process to achive this.plz mail me in detail to my id : [email protected] or [email protected]
advance thanks for mailing to me ....

How to Install .CAP file in the Java Card?

Hi Friends..
How to install *.CAP* file in the Java Card?..
I've GPShell script as follows :
mode_211
enable_trace
establish_context
card_connect -readerNumber 2
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4e4f
install_for_load -pkgAID a00000006203010c01 -nvCodeLimit 500 -sdAID A000000003000000
load -file HelloWorld.cap
card_disconnect
release_contextwith that script i can load HelloWorld.cap file successfully..
Now, how to install the HelloWorld.cap file?..
if i add script : load -file HelloWorld.cap i got this error :
install -file HelloWorld.cap
file name HelloWorld.cap
Command --> 80E602001B09A00000006203010C0107A00000015100000006EF04C60201A80000
Wrapped command --> 84E602002309A00000006203010C0107A00000015100000006EF04C60201
A80030C859793049B85300
Response <-- 6985
install_for_load() returns 0x80206985 (6985: Command not allowed - Conditions of
use not satisfied.)i ask this question because when i tried to select the applet through its AID, by this script :
establish_context
card_connect -readerNumber 2
select -AID a00000006203010c0101i got this message error : select_application() returns 0x80216A82 (6A82: The application to be selected could not be found.)
but there's exactly any that AID in my Java Card..
here's is the list of AID from My Java Card :
C:\GPShell-1.4.2>GPShell listgp211.txt
mode_211
enable_trace
establish_context
card_connect -readerNumber 3
* reader name OMNIKEY CardMan 5x21-CL 0
select -AID a000000003000000
Command --> 00A4040008A000000003000000
Wrapped command --> 00A4040008A000000003000000
Response <-- 6F108408A000000003000000A5049F6501FF9000
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4
f -enc_key 404142434445464748494a4b4c4d4e4f // Open secure channel
Command --> 80CA006600
Wrapped command --> 80CA006600
Response <-- 664C734A06072A864886FC6B01600C060A2A864886FC6B02020101630906072A864
886FC6B03640B06092A864886FC6B040215650B06092B8510864864020102660C060A2B060104012
A026E01029000
Command --> 8050000008AAF7A87C6013BC0300
Wrapped command --> 8050000008AAF7A87C6013BC0300
Response <-- 0000715457173C2A8FC1FF0200937A55C288805D8F2A04CCD43FA7E69000
Command --> 848201001023CA18742D36165ED992CFF2146C3D51
Wrapped command --> 848201001023CA18742D36165ED992CFF2146C3D51
Response <-- 9000
get_status -element 10
Command --> 80F21000024F0000
Wrapped command --> 84F210000A4F004FF8BE1492F7275400
Response <-- 0CF0544C00004D4F44554C415201000009A00000006203010C010100010AA000000
06203010C01019000
GP211_get_status() returned 2 items
List of Ex. Load File (AID state Ex. Module AIDs)
f0544c00004d4f44554c4152        1
a00000006203010c01      1
        a00000006203010c0101
card_disconnect
release_contextPlease help me..
And please correct me if i'm wrong,,
Thanks in advance..

Any suggestions for my question?..
Please help me..
Thanks in advance..

How to load an applet in card?

Hi everyone,
I use NetBeans and its JavaCard Simulator, protocol T = 0, and I am wandering how to load an applet using APDU tool instead of clicking on Run Projetc which do the mentioned thing. It would be helpfull if someone post ouptut and explain all used apdu commands.
Thanks,
Mare.

Here is the APDU trace:
Select Card Manager
=> 00 A4 04 00 08 A0 00 00 00 03 00 00 00 00
<= 6F 10 84 08 A0 00 00 00 03 00 00 00 A5 04 9F 65
    01 FF 90 00
Authenticate
cm> init-update 255
=> 80 50 00 00 08 09 41 55 62 DF F5 61 2B 00
<= 00 00 C6 D8 6A 1C B2 02 14 13 FF 02 00 00 93 73
    3A B8 2C 0F 8E A4 1D EF 84 60 77 12 90 00
cm> ext-auth plain
=> 84 82 00 00 10 B5 AA A8 E6 8B 73 57 F9 5D 37 6C
    D1 FE CF 56 32
<= 90 00
Install For Load
=> 80 E6 02 00 12 05 11 11 11 11 11 08 A0 00 00 00
    03 00 00 00 00 00 00 00
<= 00 90 00
Load Block 1
=> 80 E8 00 00 FF C4 82 01 65 01 00 1A DE CA FF ED
    02 02 04 00 01 05 11 11 11 11 11 0A 68 65 6C 6C
    6F 57 6F 72 6C 64 02 00 21 00 1A 00 21 00 0A 00
    0B 00 2A 00 0E 00 A1 00 0A 00 17 00 00 00 5A 02
    5A 00 00 00 00 00 00 01 01 00 04 00 0B 01 02 01
    07 A0 00 00 00 62 01 01 03 00 0A 01 06 11 11 11
    11 11 11 00 08 06 00 0E 00 00 00 80 03 00 FF 00
    07 01 00 00 00 1C 07 00 A1 00 01 10 18 8C 00 04
    7A 05 30 8F 00 09 3D 8C 00 02 18 1D 04 41 18 1D
    25 8B 00 03 7A 04 22 18 8B 00 07 60 03 7A 19 8B
    00 06 2D 1A 04 25 75 00 6D 00 06 00 00 00 1D 00
    01 00 2C 00 02 00 3B 00 40 00 4A 00 41 00 57 00
    42 00 62 19 8B 00 05 3B 19 03 1A 07 25 8B 00 08
    70 49 19 8B 00 05 3B 19 03 1A 07 25 8B 00 08 70
    3A 19 8B 00 05 3B 19 03 1A 07 25 8B 00 08 70 2B
    03 32 04 8D 00 00 32 1F 8D 00 01 70 1E 05 8D 00
    00 32 1F 8D 00
<= 00 90 00
Load other Blocks with 80 E8 00 xx ... which xx is the Block number
Load Last Block
=> 80 E8 80 01 6A 00 01 70 13 03 8D 00 00 32 1F 8D
    00 01 70 08 11 6D 00 8D 00 01 7A 08 00 0A 00 00
    00 00 00 00 00 00 00 00 05 00 2A 00 0A 06 80 08
    10 06 80 07 01 06 00 00 01 03 80 03 02 06 80 03
    00 03 80 0A 06 03 80 0A 01 03 80 03 03 03 80 0A
    08 01 00 02 00 09 00 17 00 00 00 13 05 06 04 0A
    07 07 25 09 06 09 06 09 08 05 06 05 06 05 08 00
<= 00 90 00
Install For Install
cm> install -i 111111111111 -q C9#() 1111111111 111111111111
=> 80 E6 0C 00 1A 05 11 11 11 11 11 06 11 11 11 11
    11 11 06 11 11 11 11 11 11 01 00 02 C9 00 00 00
<= 90 00Note that if you want to use APDU manually, you should do the authenticate process and loading all blocks of the CAP file yourself.
Note that this is the APDU for a real card that is executed in JCOP Environment. I think it should work for the simulators too except the authentication commands.

How to CAC (Smart Card) enable the server within JDev

I need to know how to CAC (Smart Card) enable the server within JDev, or if it is even possible.

Kamran,
you are definitely thinking in the right direction.
1) Would I need to export or enter all the existing users of the system presently available through an internal database to the SSO Repository or there is a different way of getting the users to the OID when they first run the url or our Oracle Forms App?
You have a choice: pre-load (probably using LDIF) or create what I call a self-registration process. Pre-load will require the arduous task of gathering the CAC user CN's in advance. This is technically easy but logistically a nightmare.
I created a self-registration JSP which is invoked by a failure to lookup a user in OID. Registration involves requiring a user to enter valid database credentials, testing the credentials (by making a connection) and binding the database userid/password to the CAC identity.
2) How would I get the CAC Certificate CN from the Browser or CAC Card so I can make the comparison to the OID CN?
When you configure the SSO for certificate authentication, the HTTP_Server will pass the SSL variables (which include the CAC certificate which was authenticated in the SSL handshake) to the sso/web application deployed in the OC4J_SECURITY container. You can install your own plug-in that the SSO will invoke where you can retrieve the authenticated certificate and get any of the information therein from Java.
I recommend you get very acquainted with the SSO Admin Guide (esp. Cert authentication chapter), as well as, the Forms Deployment Guide (esp. SSO chapter).
There is too much to fit here. Things would be a lot easier if Forms Server supported enterprise users for authentication to database. Forms apps are relegated to the whole business of RADs and such which gives you X.509 certificate (and thus CAC) authentication but is rather convoluted IMHO (password in the clear in the RAD, orclResourceViewer permission for Forms Server, userid/password login in the background) but that is a different discussion.
Good Luck.
regards,
tt

How to configure Firefox to use cert from smart card reader on Sun Ray 3 Plus

I have a Sun Ray 3 Plus configured so the user needs a smart card to login (CAC card) and bring up a Java Desktop on the Sun Ray Server (Solaris 10 SPARC).
Now I am trying to get Firefox to read the certificate from the smart card reader but not sure how to go about doing that.
From searching online, it seems like I have to load a module in Firefox:
Edit -> Preferences -> Certificates -> Security Devices
But what file do I load? I'm assuming it is a file that's part of the SUNWut package?

I try to test bumblebee with:
optirun glxgears
but I get this error:
Xlib: extension "GLX" missing on display ":8".
Error: couldn't get an RGB, Double-buffered visual

How to Load the cap file to the SSD with DAP

Dear everybody,
How to use upload, load and install command to load cap file to the SSD with DAP?
My step:
1 I have already input the DAP Key into the SSD.
2 Select ISD
3 Do auth
4 Upload -s ssdaid -d "XXX.cap", but JCOP return 6985.
I don't kown why.
Thank you very much.
Edited by: Ivy_D on May 20, 2009 12:16 AM

(The JCOP3.1,1 Eclipse Plugin's emulator) install for load still complains 6985 after i did these belows step by step. I will appreciate yours helps very much!
1: install a new security domain.
cm> install -s -b -i A000000003535042 A0000000035350 A000000003535041
=> 80 E6 0C 00 20 07 A0 00 00 00 03 53 50 08 A0 00 .... ......SP...
00 00 03 53 50 41 08 A0 00 00 00 03 53 50 41 01 ...SPA......SPA.
C0 02 C9 00 00 00 ......
(5227 usec)
<= 90 00
cm> /select A000000003535041
=> 00 A4 04 00 08 A0 00 00 00 03 53 50 41 00 ..........SPA.
(2303 usec)
<= 6F 10 84 08 A0 00 00 00 03 53 50 41 A5 04 9F 65 o........SPA...e
01 FF 90 00 ....
Status: No Error
2.1 use the ISD key to build a security channle by ISD to personalize the new secuirty domain
cm> set-key 255/1/DES-ECB/404142434445464748494a4b4c4d4e4f 255/2/DES-ECB/404142434445464748494a4b4c4d4e4f 255/3/DES-ECB/404142434445464748494a4b4c4d4e4f
cm> auth
=> 80 50 00 00 08 40 74 01 18 F9 FA 68 07 00 [email protected]..
(2274 usec)
<= 00 00 57 F3 97 D9 7F 72 88 55 FF 02 00 02 81 8D ..W....r.U......
91 65 B4 F2 A9 29 B2 C0 A4 AD FD C5 90 00 .e...)........
Status: No Error
=> 84 82 00 00 10 DE 01 A2 F1 79 12 8F 2E 87 6F FE .........y....o.
63 0E E4 5D 40 c..]@
(1969 usec)
cm> put-pub-key --tokenpin 123456 115 c:/gptest.p12
=> 80 D8 00 01 88 73 A1 80 EA 15 24 8C 5C 26 E1 31 .....s....$.\&.1
02 FE B1 44 0E 37 4F D5 49 29 25 14 5C 7B E0 63 ...D.7O.I)%.\{.c
87 0C E8 B8 03 FF AF 0B F2 2B 54 6A 16 4A D6 8F .........+Tj.J..+
EE B6 E0 1A 29 F2 13 E8 2B 04 FC 5F 2F D2 51 ED ....)....._/.Q._
_18 40 D3 E1 AF 36 CA A2 58 45 AC 38 3D 5F D4 56 [email protected]=_.V
56 D8 87 5D 45 86 B9 36 F0 07 88 AD 59 78 A1 03 V..]E..6....Yx..
2D F4 DE E9 51 E3 75 65 E3 2B B7 49 11 A5 E3 75 -...Q.ue.+.I...u
39 25 1C 44 FB D5 3C 57 40 DD 64 22 D0 0A 8E 88 9%.D..<[email protected]"....
2C 52 7B E2 67 A4 0B 65 A0 03 01 00 01 00 ,R{.g..e......
(2614 usec)
<= 73 90 00
cm> card-info
=> 80 F2 80 00 02 4F 00 00 .....O..
(1488 usec)
<= 08 A0 00 00 00 03 00 00 00 01 9E 90 00 .............
Status: No Error
=> 80 F2 40 00 02 4F 00 00 [email protected]..
(2125 usec)
<= 08 A0 00 00 00 03 53 50 42 0F C0 90 00 ......SPB....
Status: No Error
=> 80 F2 10 00 02 4F 00 00 .....O..
(1794 usec)
<= 07 A0 00 00 00 03 53 50 01 00 01 08 A0 00 00 00 ......SP........
03 53 50 41 90 00 .SPA..
Status: No Error
Card Manager AID : A000000003000000
Card Manager state : OP_READY
Sec. Domain:{color:#ff0000}PERSONALIZED (SV------) A000000003535042{color}
Load File : LOADED (--------) A0000000035350 (Security Domain)
Module : A000000003535041
cm> /cap-sign --tokenpin 123456 a.cap A000000003535042 c:/gptest.p12
cm> /cap-info a.cap
SHA (Load File data): {color:#ff0000}1BD8F3CCC0042A5EEF9845FA3C667834051F4FAD{color} -- Load File Data Block Hash
SHA (Load File dbg) : A36B4AED89FF8C4B8D8BBDDEB40757E36477143F
SHA (Load File) : 0D4AD84E20D00C26ABA1BF5677636414234F5743
DAP block(s) :
DAP block : 1
AID : A000000003535042
Signature : 19F414292C00F9B7C89E7341A13AF15B
CCF90D17A112418EAF556B5172EBE39C
E05DF0CDDD68EFD2559CC7EC591878DF
14B5C0FBC5C6CF6A0DC6E50B4AC99216
7D6C46DC4098E0A1AC11DB69596E4A71
F34CBFBD7DFABA88C6E8C2348FF8A9FC
A8E22074B4D1B9D2AB5993A539BE8E1F
6187252B9912909AE1DA4E5FAE866960
Algorithm : VOP 2.0.1'
Signed by : c=CN, st=beijing, l=beijing, o=logis, ou=logiscn, cn=gptest
Load Token(s) : none
Install Token(s) : none
then send install for load
cm> send 80E602002908{color:#ff0000}72666370626F6332{color}08{color:#ff0000}A000000003535042{color}14{color:#ff0000}1BD8F3CCC0042A5EEF9845FA3C667834051F4FAD{color}000000
=> 80 E6 02 00 29 08 72 66 63 70 62 6F 63 32 08 A0
00 00 00 03 53 50 42 14 1B D8 F3 CC C0 04 2A 5E
EF 98 45 FA 3C 66 78 34 05 1F 4F AD 00 00 00
(3108 usec)
<= 69 85 i.
Status: Conditions of use not satisfied

How to load .cap on a smart card

Similar Messages

Maybe you are looking for