How to use a SmartCard CSP (SafeSign)

Hi!
I've got a SmartCard Reader (OmniKey) installed on my PC, together with a CSP from SafeSign.
Keys and Certificates are installed on the SmartCard.
From C++, it's no problem to access the SmartCard via the CSP.
But how do this from Java? It'v important that the access is done via the installed CSP (it's a dll file)
Thanks in advance
Christian Herold

Let's explain the CSP issue
SafeSign ( A.E.T ) writes at least two drivers (as known as Cryptographic Service Providers): one is for Microsoft CryptoAPI and other is a PKCS#11 driver.
Java can't access Microsoft CryptoAPI directly; it has to use the PKCS#11 driver (aetpkss1.dll) that I've mentioned. Sun chose to use only PKCS#11 drivers because they're more standard than Microsoft CryptoAPI (PKCS#11 drivers exist for Unix machines as well, and Sun makes Unix boxes).
In the JDK 5.0 there is a PKCS#11 wrapper licensed and slightly modified from IAIK that can be used by the JCE API. Please check the JCE PKCS#11 documentation in your JDK 5.0 docs.

Similar Messages

How to use the pps function from JCOP?

Hi
I'm trying to use the pps function from JCTerminal (JCOP API: [url http://www.cs.ru.nl/~woj/jcopapi/com/ibm/jc/JCTerminal.html#pps(int, int)]pps function ) to connect my client to a virtual card with a specific protocol (T=0).
But I always got the error: "Protocol and parameter selection not supported by this terminal!"
I've tried to make an ATR that support both protocol : [url http://smartcard-atr.appspot.com/parse?ATR=3b909580811fc7dc]3B 90 95 80 81 1F C7 DC.
I really don't know what value to put in the second parameter (baud rate), I've tried with 150000, which is in the range of the ATR but I'm not sure this is correct. And I could't find any example of it.
I'm also not sure where to put the pps command, the specification say directly after a reset, so I tried this implementation:
System.out.print("Start");
 readers = TerminalFactory.getDefault().terminals().list(State.CARD_PRESENT);
 //If no readers has a card it ends the process
 if(readers.isEmpty()){
 System.out.println("\nNo card in the reader...");
 return;
 System.out.println("\nReader Type: "+readers.get(0).toString());
 term = (PCSCJCTerminal)JCTerminal.getInstance("PCSC", readers.get(0).toString().substring(15));
 term.open();
 System.out.println("\nTerminal opened");
 //Getting the ATR
 atr = new ATR(term.waitForCard(2000));
 try {
 term.pps(JCTerminal.PROTOCOL_T0, (int)150000);
 } catch (Exception e) {
 e.printStackTrace();
 System.out.println("ATR: "+toHex(atr.getBytes()));
 //sending a data 11223344
 System.out.println("\nsending data: 11223344");
 byte[] responsesend = term.send(0,cmdsend,0,cmdsend.length);
 System.out.println("Response data is:" + toHex(responsesend));
 //close terminal
 term.close();
 System.out.println("\nTerminal closed");I've got this output on the console:
StartReader Type: PC/SC terminal Virtual CAD Reader 0
Terminal opened
ATR: 3b 90 95 90 00 81 1f c7 cc
sending data: 11223344
Protocol and parameter selection not supported by this terminal!
 at com.ibm.jc.JCTerminal.pps(Unknown Source)
 at com.test.essai.main(essai.java:46)
>
And If I take a look at the data exchanged with the card:
Running in Virtual Card mode...
ATR: 3B909580811FC7DC
Waiting for event (power: off, protocol: unknown/undefined)...
Waiting for event (power: off, protocol: unknown/undefined)...
Raw event data: 01
Event: VCAD_EC_POWER_ON (0x01)
Reply: VCAD_SC_OK (0x00) (in reply to VCAD_EC_POWER_ON) ATR: 3b909580811fc7dc
Raw reply data: 003b909580811fc7dc
Sending reply...
Waiting for event (power: on, protocol: unknown/undefined)...
Waiting for event (power: on, protocol: unknown/undefined)...
Raw event data: 06ff11957b
Event: VCAD_EC_EXCHANGE_TPDU (0x06) C-TPDU: ff11957b
Accepting any PPS request parameters: Protocol: t=1; FI=9, DI=5
Reply: VCAD_SC_OK (0x00) (in reply to VCAD_EC_EXCHANGE_TPDU) R-TPDU: ff11957b
Raw reply data: 00ff11957b
Sending reply...
>
This (above) is the PPS command but not from the PPS function, it is always sent with protocol T=1
Waiting for event (power: on, protocol: t=1)...
Raw event data: 0501
Event: VCAD_EC_SET_PROTOCOL (0x05) Protocol: t=1
Reply: VCAD_SC_OK (0x00) (in reply to VCAD_EC_SET_PROTOCOL)
Raw reply data: 00
Sending reply...
Waiting for event (power: on, protocol: t=1)...
Raw event data: 0600c10120e0
Event: VCAD_EC_EXCHANGE_TPDU (0x06) C-TPDU: 00c10120e0
Handling protocol-specific command...
Protocol block:
NAD: 0x00
PCB: 0xc1 (T1_S_BLOCK); S-Block type: T1_SBT_IFS_REQ
LEN: 1
INF:
IFS: 20
EDC: 0xe0
Changing IFS(other) from 32 to 32
Reply: VCAD_SC_OK (0x00) (in reply to VCAD_EC_EXCHANGE_TPDU) R-TPDU: 00e10120c0
Raw reply data: 0000e10120c0
Sending reply...
Waiting for event (power: on, protocol: t=1)...
Raw event data: 0600001300a404000d54657374436c69656e7441707000f0
Event: VCAD_EC_EXCHANGE_TPDU (0x06) C-TPDU: 00001300a404000d54657374436c69656e74
41707000f0
Processing app. command...
App. block:
NAD: 0x00
PCB: 0x00 (T1_I_BLOCK); Seq. #: 0; More data: 0
LEN: 13
INF:
00a404000d54657374436c69656e7441707000
EDC: 0xf0
cmd name: N/A (class #4)
cmd: 00a40400 0d 54657374436c69656e74417070 70
Responding with the reversed command data, SW is hardcoded to 90<INS>
rsp: 707041746e65696c4374736554 90a4
Reply: VCAD_SC_OK (0x00) (in reply to VCAD_EC_EXCHANGE_TPDU) R-TPDU: 00000f70704
1746e65696c437473655490a475
Raw reply data: 0000000f707041746e65696c437473655490a475
Sending reply...
Waiting for event (power: on, protocol: t=1)...
Raw event data: 060040041122334400
Event: VCAD_EC_EXCHANGE_TPDU (0x06) C-TPDU: 0040041122334400
Processing app. command...
App. block:
NAD: 0x00
PCB: 0x40 (T1_I_BLOCK); Seq. #: 1; More data: 0
LEN: 4
INF:
11223344
EDC: 0x00
cmd name: N/A (class #1)
cmd: 11223344
Responding with the reversed command data, SW is hardcoded to 90<INS>
rsp: 9022
Reply: VCAD_SC_OK (0x00) (in reply to VCAD_EC_EXCHANGE_TPDU) R-TPDU: 0040029022f
0
Raw reply data: 000040029022f0
Sending reply...
Waiting for event (power: on, protocol: t=1)...
Raw event data: 03
Event: VCAD_EC_POWER_OFF (0x03)
Reply: VCAD_SC_OK (0x00) (in reply to VCAD_EC_POWER_OFF)
Raw reply data: 00
Sending reply...
Waiting for event (power: off, protocol: unknown/undefined)...
>
If someone know how to use this function or have any advice to help me to select a specific protocol with Jcop API, please let me know.
If you you need any more information don't hesitate to ask.
Best regards
Edited by: Cyril on Sep 22, 2011 9:54 AM

-1
I'm using a virtual terminal (windows driver), and I don't see how I could turn off the Auto-pps. I've also tried with a real reader and a card and I have the same error.
-2
I've tried value in the range of the atr (based on this analysis: [url http://smartcard-atr.appspot.com/parse?ATR=3b909580811fc7dc]http://smartcard-atr.appspot.com/parse?ATR=3b909580811fc7dc ). But I don't know if only I value of baud-rate is possible in the range. Anyway I just would like to change the protocol, not the baud-rate.
-3
I've already tried to call pps function before, after the first reset, or with another reset later and I always got the same thing.
 term = (PCSCJCTerminal)JCTerminal.getInstance("PCSC", readers.get(0).toString().substring(15));
 term.open();
 System.out.println("\nTerminal opened");
 //Getting the ATR
 atr = new ATR(term.waitForCard(2000));
 System.out.println("ATR: "+toHex(atr.getBytes()));
 jcard = new JCard(term,atr,0);
 jcard.reset();
 try {
 term.pps(JCTerminal.PROTOCOL_T0, (int)312500);
 } catch (Exception e) {
 e.printStackTrace();
 }The same pps is always send after each reset...

How can use my Wireless Location Appliance to work with RF ID's?

How can use my Wireless Location Appliance to work with RF ID's for Asset Tagging.
It seems Smartcard used for ID cards have a small RF ID, can I use this for Asset Tagging?
Thanks in Advance

There are two kinds of RFID tags: Active tags, which have a battery or other internal power source, and passive tags, which have no power source and work by reflecting the energy from an RFID scanner (basically). At the energy levels and distances used for WiFi location detection, passive tags will not return a detectable signal.
Take a look at http://www.aeroscout.com/ for more info on WiFi RFID tagging.

How to use current windows login credientials to login other machines

Is there any way that i might use to RDP the serves using currently windows login credentials automatically ? Currently i am using smartcard for logging windows in the environment.

Hi,
After referring your comment, I can understand that you want to use same RDP credential which you are using with smartcard credential.
As per my research, here I am sorry to inform you that if you are using Remote Desktop Services with smart card logon, you cannot delegate default and saved credentials. Other than that if you don’t use smartcard then you can able to save credential and can
enable SSO for terminal server connection.
More information:
1. How to enable Single Sign-On for my Terminal Server connections
2. Smart Card Group Policy and Registry Settings
Hope it helps!
Thanks,
Dharmesh

How to use one email adress for multiple recipients

Hello,
I'd like to know how to use one email adress for multiple recipients.
this would be very useful or projects. for example;
if i send one mail to [email protected], all people in this project get an email.
I will add the people in this project myself.
I know it is possible, but I don't know how to do it ;-)
please help me!

Hope this help.
_http://technet.microsoft.com/en-us/library/cc164331(v=exchg.65) .aspx

Can't figure out how to use home sharing

Since the latest couple iTunes updates, my family and I can not figure out how to use home sharing. Everyone in our household has their own iTunes, and for a long time we would just share our music through home sharing. But with the updates, so much has changed that we can no longer figure out how to use it.
I have a lot of purchased albums on another laptop in the house, that im trying to move it all over to my own iTunes, and I have spent a long time searching the internet, and everything. And I just can't figure out how to do it. So.... how does it work now? I would really like to get these albums from my moms iTunes, onto mine. I would hate to have to buy them all over again.
If anyone is able to help me out here, that would be great! Thanks!

The problem im having is that after I am in another library through home sharing, I can't figure out how to select an album and import it to my library. They used to have it set up so that you just highlight all of the songs you want, and then all you had to do was click import. Now I don't even see an import button, or anything else like it. So im lost... I don't know if it's something im doing wrong, or if our home sharing system just isn't working properly.
Thanks for the help.

How to use the same POWL query for multiple users

Hello,
I have defined a POWL query which executes properly. But if I map the same POWL query to 2 portal users and the 2 portal users try to access the same page simultaneously then it gives an error message to one of the users that
"Query 'ABC' is already open in another session."
where 'ABC' is the query name.
Can you please tell me how to use the same POWL query for multiple users ?
A fast reply would be highly appreciated.
Thanks and Regards,
Sandhya

Batch processing usually involves using actions you have recorded. In Action you can insert Path that can be used during processing documents. Path have some size so you may want to only process document that have the same size. Look in the Actions Palette fly-out menu for insert path. It inserts|records the current document work path into the action being worked on and when the action is played it inserts the path into the document as the current work path..

How to use airport time capsule with multiple computers?

I'm sure there are some thread about this but i couldn't find it... so sorry for that but hear me out! =)
I bought the AirPort Time Capsule to back up my MBP
And so i did.
then i thought "let give this one a fresh start" so i erased all of it with the disk utility and re-installed the MBP from the recovery disk.
I dont want all of the stuff i backed up just a few files and some pictures so i brought that back.. so far so good.
Now i want to do a new back up of my MBP so i open time machine settings, pick the drive on the time capsule and then "Choose" i wait for the beck up to begin, and then it fails. It says (sorry for my bad english, im swedish haha) "the mount /Volume/Data-1/StiflersMBP.sparsebundle is already in use for back up.
this is what i want:
i want the "StiflersMBP.sparsebundle" to just be so i can get some stuf when i need them. it's never to be erased.
i want to make a new back up of my MBP as if it's a second computer...
so guys and girls, what is the easiest and best solution?
Best regards!

TM does not work like that.
If you want files to use later.. do not use TM.
Or do not use TM to the same location. Plug a USB drive into the computer and use that as the target for the permanent backup.
Read some details of how TM works so you understand what it will do.
http://pondini.org/TM/Works.html
Use a clone or different software for a permanent backup.
http://pondini.org/TM/Clones.html
How to use TC
http://pondini.org/TM/Time_Capsule.html
This is helpful.. particularly Q3.
Why you don't want to use TM.
Q20 here. http://pondini.org/TM/FAQ.html

How to use multiple ipods on one account

I have an Ipod classic and just bought my sons two nano's how do I use these on the same account without changing my account info?

Take a look here:
How to use multiple iPods with one computer
Forum Tip: Since you're new here, you've probably not discovered the Search feature available on every Discussions page, but next time, it might save you time (and everyone else from having to answer the same question multiple times) if you search a couple of ways for a topic, both in the relevant forums, in the User Tips Library and in the Apple Knowledge Base before you post a question.
Regards.

How to use a Table View in AppleScriptObjC

How can I use a table view and add data to it? And how can I display a button cell and image cell in the table? Thanks.

Hi all,
Actually i need some more clarification. How to use the same select statement, if i've to use the tabname in the where clause too?
for ex : select * from (tab_name) where....?
Can we do inner join on such select statements? If so how?
Thanks & Regards,
Mallik.

How to use '|' delimited as seprator in GUI_DOWNLOAD ? Plz suggest me ,,

how to use '|' delimited as seprator in GUI_DOWNLOAD ? Plz suggest me ,,
i want the output should be seprated by '|' delimited when i download the file.

Hi,
We will pass the seperator to the WRITE_FIELD_SEPARATOR parameter as
CALL FUNCTION 'GUI_DOWNLOAD'
EXPORTING
filename = v_file
write_field_separator = '|'
TABLES
data_tab = itab[] . "Our internal talbe filled with data
Re: Why Function GUI_DOWNLOAD can create XML file but not a flat file?
Award points if useful
Thanks,
Ravee...

** How to use TO_DATE function in Stored Proc. for JDBC in ABAP-XSL mapping

Hi friends,
I use ABAP-XSL mapping to insert records in Oracle table. My Sender is File and receiver is JDBC. We use Oracle 10g database. All fields in table are VARCHAR2 except one field; this is having type 'DATE'.
I use Stored procedure to update the records in table. I have converted my string into date using the Oracle TO_DATE function. But, when I use this format, it throws an error in the Receiver CC. (But, the message is processed successfully in SXMB_MONI).
The input format I formed like below:
<X_EMP_START_DT hasQuot="No" isInput="1" type="DATE">
Value in Payload is like below.
<X_EMP_START_DT hasQuot="No" isInput="1" type="DATE">TO_DATE('18-11-1991','DD-MM-YYYY')</X_EMP_START_DT>
Error in CC comes as below:
Error processing request in sax parser: Error when executing statement for table/stored proc. 'SP_EMP_DETAILS' (structure 'STATEMENT'): java.lang.NumberFormatException: For input string: "TO_DATE('18"
Friends, I have tried, but unable to find the correct solution to insert.
Kindly help me to solve this issue.
Kind Regards,
Jegathees P.
(But, the same is working fine if we use direct method in ABAP-XSL ie. not thru Stored Procedure)

Hi Sinha,
Thanks for your reply.
I used the syntax
<xsl:call-template name="date:format-date">
<xsl:with-param name="date-time" select="string" />
<xsl:with-param name="pattern" select="string" />
</xsl:call-template>
in my Abap XSL. But, its not working correctly. The problem is 'href' function to import "date.xsl" in my XSLT is not able to do that. The system throws an error. Moreover, it is not able to write the command 'extension-element-prefixes' in my <xsl:stylesheet namespace>
May be I am not able to understand how to use this.
Anyway, I solved this problem by handling date conversion inside Oracle Stored Procedure. Now, its working fine.
Thank you.

Sender Mail Adapter - S/MIME - How to use it?

Hi guys,
I am trying to figure out how to use the S/MIME security parameter of the Sender Mail Adapter in PI 7.1.
Could anyone point me to some useful documentation/examples/blogs ?
Or perhaps explain what steps are involved when configuring this parameter?
We are pulling emails from an Microsoft Exchange server.
Many thanks,
Aldo

First of all one sender mail adapter has to be tight with a specific sender email address.
The email has to be decrypted as whole, you cannot decrypt parts of it.
Then you store certificates to secure store in J2EE server and point to it in send agreement, this should be equal to HTTPS setup
Check security guide:
http://help.sap.com/saphelp_nwpi71/helpdata/EN/f7/c2953fc405330ee10000000a114084/frameset.htm

How to use Logical database in function module?

I will create a function module in HR.
but how to use Logical database in function module ? Logical database PNP always show screen.in function (RFC) code , it is a matter.

You cannot attach the LDB to the main program of the function group.
- So you may [SUBMIT|https://www.sdn.sap.com/irj/sdn/advancedsearch?cat=sdn_all&query=submit&adv=false&sortby=cm_rnd_rankvalue] a report which use the LDB and get back the data (export/import), by default in the syntax of SUBMIT the selection-screen will not be displayed
- Use [LDB_PROCESS|https://www.sdn.sap.com/irj/sdn/advancedsearch?query=ldb_process&cat=sdn_all], fill a structured table for selection, and get data back in another table
- Use [HR function modules to read Infotypes|https://www.sdn.sap.com/irj/sdn/advancedsearch?cat=sdn_all&query=hrfunctionmodulestoread+Infotypes&adv=false&sortby=cm_rnd_rankvalue].
Regards

How-to use Excel for the XML file input?

Hello all,
Following our discussion with Gerhard Steinhuber on the very nice tutorial from Horst Schaude , "How to upload mass data via XML File Input" , I am starting this new discussion.
In the comments section of this previous cited tutorial, Rufat Gadirov explains how to use a generated XML from Eclipse instead of your XSD file as your source in Excel.
However, in spite of all the instructions, I am still facing the same issue in Excel when I try to save my file as XML : "The XML maps in this workbook are not exportable".
What I try to do is to create one or more Sales Orders with multiple Items in it from a XML File Input, using excel to enter data.
The part with the File input is working (if I directly upload my file to the webDAV, it creates a sales order instance with multiple items).
The only missing part is the Excel data input that I cannot make work. Any help on this matter would be greatly appreciated.
Here is my XML file that I try to use as a source in Excel before inputing data from Excel:
<?xml version="1.0" encoding="UTF-8"?>
<p:MySalesOrderUploadedIntegrationInputRequest xmlns:p="http://001365xxx-one-off.sap.com/YUUD0G3OY_" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<MessageHeader>
 <CreationDateTime>2015-03-02T12:00:00.000Z</CreationDateTime>
</MessageHeader>
 <List actionCode="01" listCompleteTransmissionIndicator="true" reconciliationPeriodCounterValue="0">
 <MySalesOrderUploaded>
 <MySalesOrderUploadedID>idvalue0</MySalesOrderUploadedID>
 <MyBuyerID schemeAgencyID="token" schemeAgencySchemeAgencyID="1" schemeID="token">token</MyBuyerID>
 <MyDateTime>2015-03-02T12:00:00.000Z</MyDateTime>
 <MyName languageCode="EN">MyName</MyName>
 <MyBillToParty schemeAgencyID="token" schemeAgencySchemeAgencyID="1" schemeAgencySchemeID="token" schemeID="token">token</MyBillToParty>
 <MyDateToBeDelivered>2001-01-01</MyDateToBeDelivered>
 <MyEmployeeResponsible schemeAgencyID="token" schemeAgencySchemeAgencyID="1" schemeAgencySchemeID="token" schemeID="token">token</MyEmployeeResponsible>
 <MySalesUnit schemeAgencyID="token" schemeAgencySchemeAgencyID="1" schemeAgencySchemeID="token" schemeID="token">token</MySalesUnit>
 <MyItem>
 <MyItemID>token</MyItemID>
 <MyItemProductID schemeAgencyID="token" schemeID="token">token</MyItemProductID>
 <MyItemDescription languageCode="EN">MyItemDescription</MyItemDescription>
 <MyProductTypeCode>token</MyProductTypeCode>
 <MyRequestedQuantity unitCode="token">0.0</MyRequestedQuantity>
 <MyConfirmedQuantity unitCode="token">0.0</MyConfirmedQuantity>
 <MyNetAmount currencyCode="token">0.0</MyNetAmount>
 </MyItem>
 </MySalesOrderUploaded>
 <MySalesOrderUploaded>
 <MySalesOrderUploadedID>idvalue0</MySalesOrderUploadedID>
 <MyBuyerID schemeAgencyID="token" schemeAgencySchemeAgencyID="1" schemeID="token">token</MyBuyerID>
 <MyDateTime>2015-03-02T12:00:00.000Z</MyDateTime>
 <MyName languageCode="EN">MyName</MyName>
 <MyBillToParty schemeAgencyID="token" schemeAgencySchemeAgencyID="1" schemeAgencySchemeID="token" schemeID="token">token</MyBillToParty>
 <MyDateToBeDelivered>2001-01-01</MyDateToBeDelivered>
 <MyEmployeeResponsible schemeAgencyID="token" schemeAgencySchemeAgencyID="1" schemeAgencySchemeID="token" schemeID="token">token</MyEmployeeResponsible>
 <MySalesUnit schemeAgencyID="token" schemeAgencySchemeAgencyID="1" schemeAgencySchemeID="token" schemeID="token">token</MySalesUnit>
 <MyItem>
 <MyItemID>token</MyItemID>
 <MyItemProductID schemeAgencyID="token" schemeID="token">token</MyItemProductID>
 <MyItemDescription languageCode="EN">MyItemDescription</MyItemDescription>
 <MyProductTypeCode>token</MyProductTypeCode>
 <MyRequestedQuantity unitCode="token">0.0</MyRequestedQuantity>
 <MyConfirmedQuantity unitCode="token">0.0</MyConfirmedQuantity>
 <MyNetAmount currencyCode="token">0.0</MyNetAmount>
 </MyItem>
 </MySalesOrderUploaded>
 </List>
</p:MySalesOrderUploadedIntegrationInputRequest>
Thank you all for your attention.
Best regards.
Jacques-Antoine Ollier

Hello Jacques-Antoine,
I suppose that as you have tried to construct a map from the schema, you have taken the elements from the List level down. In this case I also can't export the map.
But if you take the elements from the level MySalesOrderUploaded down, you'll get the exportable map (screenshots)
Best regards,
Leonid Granatstein

How to use a SmartCard CSP (SafeSign)

Similar Messages

Maybe you are looking for