VERIFY fails if Card Manager selected first

Hi,
If I send VERIFY with the appropriate key the card replies with 0x9000 (OK). The VERIFY command looks like this: A0 20 00 00 08 XX XX XX XX XX XX XX XX
If I first select the card manager (00 A4 04 00 07 A0 00 00 00 03 00 00) and then send VERIFY, the card replies with 0x6E00 (class byte expected by Transport Manager is not correct) or with 0x6D00 (Invalid instruction byte).
I would like to ask this:
Why does it matter if the Card manager is selected or not?
Does not the card manager get selected at reset automatically?
And who else would receive the command (and dispatch it) if not the card manager?
Why would I get an "Invalid instruction byte" error when the same command does not fail when sent first? Does that mean that different entities are involved in processing the command?
It is probably something silly, but buried somewhere where I cannot find it.
Thanks
Edited by: 815684 on Dec 20, 2010 7:02 AM

815684 wrote:
It is a multiapplication card and it is for GSM (I was actually wondering what class A0 was). But is not the Card Manager supposed to be selected immediately after reset (all this happens immediately after reset)?If you have a default selectable applet loaded onto your card, this will receive any APDU's sent to the card if no other applet has been selected first. If you want to perform card management operations, you need to select the card manager before you can proceed. You do not need to select anything after reset, but there will need to be something receiving your APDU's for your card to respond.
We have a script that deletes our company's old applet (and its files) from the card and downloads a newer version. The first step of this process is to authenticate the user to the card. And though your reply clarified my question, it poses another one: Since I need to delete/download applets, why do I authenticate myself to someone else (the GSM applet) rather than the Card Manager (which is supposed to be in charge of deleting and downloading applets)? Is not the Card Manager supposed to be in charge of this?If you are doing card content management, you need to authenticate to the card manager. Your applet may have a mechanism that requires authentication to the applet before it will allow itself to be deleted. There is no official GP way of supporting this, so if this is the case someone that worked on the applet will be aware of this.
PS I am reading the GP, unfortunately it does take time to understand this stuffBe patient :) Reading this document will raise more questions. You just need to look through the document for these answers as there is a good chance you will find it in there somewhere. If and when that fails, you can always get help here. Just don't be surprised if the answer is: it is in the GP card spec. Hopefully we can point you to where as well.
Cheers,
Shane

Similar Messages

Unable to select Card Manager or invalid FCI

Hi,
I have JCOP41V231 but I can not upload the CAP file.
When I try to select the Card Manager I get an error 6A82.(see trace bellow)
I asked the card supplier and he answer:
"our all samples have not initialized. so you can cannot select the card manager.
if the card have not initialized, and you can select wrong card manager, the card will be damage.
please initialize the card."
How can I initialize the card ?
Is there a special tool to do that?
/term "winscard:4|SCM Microsystems Inc. SCR33x USB Smart Card Reader 0"
--Opening terminal
/card -a a000000003000000 -c com.ibm.jc.CardManager
resetCard with timeout: 0 (ms)
--Waiting for card...
ATR=3B FA 13 00 00 81 31 FE 45 4A 43 4F 50 34 31 56 ;.....1.EJCOP41V
32 33 31 97 231.
IOCTL().
ATR:
T = 1
=> 00 A4 04 00 08 A0 00 00 00 03 00 00 00 00 ..............
(9682 usec)
<= 6A 82 j.
Status: File not found
jcshell: Unable to select Card Manager or invalid FCI: Unknown Global Platform Java Card.
Subsequent commands might fail! Inspection might not be possible!
??> set-key 1/1/DES-ECB/404142434445464748494a4b4c4d4e4f 1/2/DES-ECB/404142434445464748494a4b4c4d4e4f 1/3/DES-ECB/404142434445464748494a4b4c4d4e4f
??> init-update 1
=> 80 50 01 00 08 0A D3 1F 2B 09 F1 CD E2 00 .P......+.....
(8444 usec)
<= 6A 81 j.
Status: Function not supported
jcshell: Error code: 6a81 (Function not supported)
jcshell: Wrong response APDU: 6A81
Unexpected error; aborting execution

Hi,
I think that you didnt prepersonalisation. Once pre-personalisation you can enter card manager.

When you register your credit card for the first time in Mac App store, Does Apple put through a 1 dollar charge to verify the card ?

When you register your credit card for the first time in Mac App store, Does Apple put through a 1 dollar charge to verify the card ? Please I need this answer so as to download the latest Mountain Lion upgrade. Thnx in advance.

The Apple Support Communities are an international user to user technical support forum. As a man from Mexico, Spanish is my native tongue. I do not speak English very well, however, I do write in English with the aid of the Mac OS X spelling and grammar checks. I also live in a culture perhaps very very different from your own. When offering advice in the ASC, my comments are not meant to be anything more than helpful and certainly not to be taken as insults.
Many folks have reported that this is true. However, the charge is not taken to the second step of completing the charge and the $1 revolves back to your account.

Java card - crd manager selection....

hi...
this is very basic, I would like to to know the procedures involved in the selection of card manager in a java card.
A tutorial link would be useful.

The Card Manager is defined in GlobalPlatform and is responsible and is a general term for the GP environment, Issuer Secrity Doman and the global PIN. It is the card administration service. In regards to Java Card Runtime Environment, it covers the Installer and the Deletion Manager.
You can find examples in this forum about the Issuer Security Doman and the global PIN. The GlobalPlatform environment is described in the GP 2.1.1 spec. under section 3.2 .

How to select Card manager on Default JavaCard simulator from NetBeans 7.2

Hi
I'm trying to resolve three questions
1) to find FAQ/Manual about simulator included into 3.0.2 JavaCard Connected platform
2) which commands for Card Manager of simulated default JavaCard are supported
3) how to upload simple applet (ex. HelloWorld from JavaCard 3.0.2) using Card Manager applet simulated on Default javaCard Connected platfrom simulator available from NetBeans 7.2
Thaaaanks

From my understanding, NetBeans uses the CREF executable from the JCDK for simulation. You can check the documentation (developer guide etc) from the JCDK for more details. The CREF emulator uses a custom applet loader so it does not use standard GP commands and will be different to a real card. As for loading your applet, you should be able to run from NB and it will start your emulator and deploy your code. I do not use netbeans so cannot really comment further.
- Shane

HT201272 Help - have an iTunes account on iPad for well over a year. Just bought iPhone 5 and I cannot purchase apps using my account. I am asked to verify my credit card and details but then it rejects them. They are still fine on the iPad. Any ideas?

Help - have an iTunes account on iPad for well over a year. Just bought iPhone 5 and I cannot purchase apps using my account. I am asked to verify my credit card and details but then it rejects them. They are still fine on the iPad. Any ideas?
I tried to contact support but they do not recognise my Thai phone number.
the Thai support site is all in Thai (and I neither read or write it).
All I want is a single email address that works - it must be quite a simple process.
I don't want to create another account with another credit card - life will just get seriously complicated then.
BTW my apple I'd is accepted for downloading free apps!!!

First of all, you should always save you photos on computer like any other digital camera.
Backup on iCloud or iTunes only backup your Camera Roll. The other photos should be already on the computer.
Note: Photos are not saved in iTunes, it's only a conduit between your iPhone and your photo managing software on computer.
What computer do you have?

What is Card Manager and how does it work ?

Hi everyone,
I would like to know how can I find complete description about "card manager"?
If there is any document or link that have explained it ,please inform me.
yours sincerely,
Orchid

Since it is part of the GP API, the only way to handle the CVM PIN is through an Applet. So you need one "Global PIN" Applet, with which you can set/block/submit/verify a the CVM PIN. All other Applets will implement a verification of the CVM PINin the select() method:
     public boolean select () {
          CVM cvm = GPSystem.getCVM(GPSystem.CVM_GLOBAL_PIN);
          if(!cvm.isVerified())
               return false;
          else
               return true;
     }

Management console fails connecting to Management server.

I have installed Oracle 9.2 on Red Hat Advanced Server V2.1.
Also installed Management server and client software on the system.
Started everything up: oemctl start oms, agentctl start agent, apachectl start...
Run Manager Console on Linux machine (i.e. locally)
Runs successfully - connecting stand-alone
Runs successfully - connecting to management sever
Installed client software on a Windows NT PC.
Runs successfully - connecting stand-alone
FAILS - connecting to Management server
On another NT PC, try running web interface to Management server
FAILS - Same error as when using thick client.
Failure is the same in both cases: The exception (java.lang.NullPointerException) occured.
Failure of both of these suggested a server issue...
Don't know where to find management server logs?
Looking at $ORACLE_HOME/Apache/Apache/logs/error_log seems unable to find files, e.g.:
[Mon Nov 25 10:01:46 2002] [error] [client 192.0.0.120] File does not exist: /u0
1/app/oracle/product/9.2.0/oem_webstage/readme/emreadme.htm
[Mon Nov 25 10:01:57 2002] [error] [client 192.0.0.120] File does not exist: /u0
1/app/oracle/product/9.2.0/oem_webstage/java/awt/KeyboardFocusManager.class
[Mon Nov 25 10:02:11 2002] [error] [client 192.0.0.120] File does not exist: /u0
1/app/oracle/product/9.2.0/oem_webstage/oracle/ewt/alert/resource/AlertBundle_en
_GB.class
[Mon Nov 25 10:02:11 2002] [error] [client 192.0.0.120] File does not exist: /u0
1/app/oracle/product/9.2.0/oem_webstage/oracle/ewt/alert/resource/AlertBundle_en
_GB.properties
[Mon Nov 25 10:02:15 2002] [error] [client 192.0.0.120] File does not exist: /u0
1/app/oracle/product/9.2.0/oem_webstage/oracle/sysman/vt/console/app/ConsoleBean
Info.class
[Mon Nov 25 10:02:15 2002] [error] [client 192.0.0.120] File does not exist: /u0
1/app/oracle/product/9.2.0/oem_webstage/sun/beans/infos/ConsoleBeanInfo.class
[Mon Nov 25 10:02:15 2002] [error] [client 192.0.0.120] File does not exist: /u0
1/app/oracle/product/9.2.0/oem_webstage/oracle/sysman/emSDK/client/appContainer/
WebApplicationBeanInfo.class
I have tried reinstalling Oracle website, however this made no difference.

Can you ping the server which is running OEM from the client NT machine?
Are you trying to connect using DNS or IP?
Verify that this works first.

Write new card manager AID for JCOP 4 1 v.2.3.1 problem .

hello mate can you help us to solve our problem :
My team have smartcard security project now , we buy blank smart card from some friend in china.
the suplier already gave us the step for Pre-Personalization, we already follow that step one by one :
1. select root using transport key >>> ok
00 a4 04 00 10 (transport key)
2. boot to jcop card >>> ok
00 f0 00 00
3. write the new card manager AID >>> here we have some problem ....
we follow the instruction to write command from our supplier >> is (a2) B0 (a1) (a0) <DATA>
can somebody help us to understand this step, to fill a2,a1,a0 variable from that command . ?
regards
fixdigital.

Can you describe how to change this key ? we used JC shell .
i mean like command to put key maybe, or you have an example ...
we already try to change the key but unsucced, like log we post before ...
still confuse which step we do wrong ...
the procedure we already do
*(1) Pre-Personalization*
/atr
/send 00a4040010<TranspotKey>
/send 00f00000 <== boot
/send 00100000 <== protect
/send 00000000 <== Fuse
*(2) then we try auth with default key, the auth still failed*
*##try use JCShell (eclispse)*
??> /card
--Waiting for card...
ATR=3B FA 13 00 00 81 31 FE 45 4A 43 4F 50 34 31 56 ;.....1.EJCOP41V
32 33 31 97 231.
ATR: T=1, FI=1/DI=3 (93clk/etu), N=0, IFSC=254, BWI=4/CWI=5, Hist="JCOP41V231"
=> 00 A4 04 00 07 A0 00 00 00 03 00 00 00 .............
(150720 usec)
<= 6F 65 84 08 A0 00 00 00 03 00 00 00 A5 59 9F 65 oe...........Y.e
01 FF 9F 6E 06 40 51 63 45 29 00 73 4A 06 07 2A ...n.@QcE).sJ..*
86 48 86 FC 6B 01 60 0C 06 0A 2A 86 48 86 FC 6B .H..k.`...*.H..k
02 02 01 01 63 09 06 07 2A 86 48 86 FC 6B 03 64 ....c...*.H..k.d
0B 06 09 2A 86 48 86 FC 6B 04 02 15 65 0B 06 09 ...*.H..k...e...
+2B 85 10 86 48 64 02 01 03 66 0C 06 0A 2B 06 01 ...Hd...f.....+
04 01 2A 02 6E 01 02 90 00 ..*.n....
Status: No Error
cm> set-key 255/1/DES-ECB/404142434445464748494a4b4c4d4e4f 255/2/DES-ECB/404142434445464748494a4b4c4d4e4f 255/3/DES-ECB/404142434445464748494a4b4c4d4e4f
cm> init-update 255
=> 80 50 00 00 08 D4 B8 B8 64 F8 80 7D 22 00 .P......d..}".
(94420 usec)
<= 00 00 93 23 00 23 87 91 54 88 FF 02 00 00 46 0C ...#.#..T.....F.
71 E4 C4 67 5B 71 CA 9D 7B 39 4C CD 90 00 q..g[q..{9L...
Status: No Error
jcshell: Error code: -5 (Authentication failed)
_##try use GPShell_
D:\Programming\Dongle_SCard\GlobalPlatform\GPShell-1.4.4>GPShell.exe helloInstallGP211.txt
mode_211
enable_trace
enable_timer
establish_context
command time: 15 ms
card_connect
command time: 219 ms
select -AID a000000003000000
Command --> 00A4040008A000000003000000
Wrapped command --> 00A4040008A000000003000000
Response <-- 6F658408A000000003000000A5599F6501FF9F6E06405163452900734A06072A864886FC6B01600C060A2A864886FC6B02020101630906072A864886FC6B03640B06092A864886FC6B040215650B06092B8510864864020103660C060A2B060104012A026E01029000
command time: 202 ms
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4e4f // Open secure channel
Command --> 80CA006600
Wrapped command --> 80CA006600
Response <-- 664C734A06072A864886FC6B01600C060A2A864886FC6B02020101630906072A864886FC6B03640B06092A864886FC6B040215650B06092B8510864864020103660C060A2B060104012A026E01029000
Command --> 8050000008CDA19913D438CC9300
Wrapped command --> 8050000008CDA19913D438CC9300
Response <-- 00009323002330915488FF020000460C71E4C46792ACEBB71CE0D0739000
mutual_authentication() returns 0x80302000 (The verification of the card cryptogram failed.)
thanks

Unable to access to GemXpresso Card Manager with JCOP 312 pluggin

Hello all,
I´m using JCOP 312 to install applets in GemXpresso 211 cards but I´m not able to achieve it. Before I achieved to install applets with JCOP 312 in JCOP 211 cards without problems. I read in others threads of this forum that it´s possible to install applets in GemXpresso cards with JCOP using com.ibm.jc.GX211CardManager class in JCOP configuration in addition to change Card Manager AID.
I don´t have the com.ibm.jc.GX211CardManager class so I can´t test this issue. does anyone have this class? I woul´d very appreciated if anyone could pass me this class.
I don´t know no other form to use GemXpresso cards with JCOP 312 eclipse pluggin.
Thanks in advance.

Yes Safarmer, this is the point, "to determine what these setting are" :-). I know to configure JCOP plugin parameters in accordance with javacard type,
but the problem is find out values of these parameters (AID Card Manager, key values,...).
Steps I do to test JCOP cards are depicted below:
/card -a a000000003000000 -c com.ibm.jc.CardManagerresetCard with timeout: 0 (ms)
--Waiting for card...
ATR=3B 66 00 FF 4A 43 4F 50 32 30 ;f..JCOP20
ATR: T=0, N=-1, Hist="JCOP20"
=> 00 A4 04 00 08 A0 00 00 00 03 00 00 00 00 ..............
(92851 usec)
<= 6F 19 84 08 A0 00 00 00 03 00 00 00 A5 0D 9F 6E o..............n
06 40 51 30 23 20 17 9F 65 01 FF 90 00 [.@Q0|mailto:.@Q0]# ..e....
Status: No Error
cm> set-key 255/1/DES-ECB/404142434445464748494a4b4c4d4e4f 255/2/DES-ECB/404142434445464748494a4b4c4d4e4f 255/3/DES-ECB/404142434445464748494a4b4c4d4e4f
cm> init-update 255
=> 80 50 00 00 08 FA 65 9D CE FA 89 4B BC 00 .P....e....K..
(116982 usec)
<= 00 00 61 73 02 05 76 90 99 52 FF 01 0D A4 66 E3 ..as..v..R....f.
7F D6 2E 15 C5 D3 3D 2A C0 69 98 AE 90 00 ......=*.i....
Status: No Error
As you see, there isn´t any problem to access to this card with JCOP.
Steps I do to test GemXpresso cards are depicted below:
/card -a a000000003000000 -c com.ibm.jc.CardManagerATR: 3F6D000080318065B00501025E83009000
ATR: T=0, N=0, Hist=80318065B00501025E83009000
jcshell: Unable to select Card Manager or invalid FCI: Unknown Global Platform Java Card.
Subsequent commands might fail! Inspection might not be possible!
??> set-key 255/1/DES-ECB/404142434445464748494a4b4c4d4e4f 255/2/DES-ECB/404142434445464748494a4b4c4d4e4f 255/3/DES-ECB/404142434445464748494a4b4c4d4e4f
??> init-update 255
jcshell: Error code: -5 (Authentication failed)
jcshell: Wrong response APDU: 434D03070001297400BD0D019EED3933FC1384F99315DD3552508A529000
Unexpected error; aborting execution
As you see, there are problems to access to this card with GemXpresso card, basically it´s not be able to select Card Manager.
I know I should to change AID Card Manager and Card Manager class to this: "/card -a A000000018434D - c com.ibm.jc.GX211CardManager" but the point is
I don´t have GX211CardManager class. Moreover I don´t know values of the keys to use with this cards type.
Regards.

Card manager id

Hi
I am trying to get a card manager id from my sim card. I am sending it a select app command without AID but it is not returing anything.
??> /send 00A4040000
=> 00 A4 04 00 00                                     .....
(3314 usec)
<= 6E 00                                              n.
Status: CLA value not supported
??> /send A0A4040000
=> A0 A4 04 00 00                                     .....
(3675 usec)
<= 67 02                                              g.
Status: 0x6702regards
Umer

You could use GET STATUS command to get Card Manager AID.
Let see section 9.4 in GP 2.1.1 specification for detail.GET STATUS requires you authenticate to the card manager first. If the card manager is not the default selectable applet you cannot use this. For a GP card, a SELECT with no AID provided should select the card manager and the AID should be in the response.
Cheers,
Shane

I recently got a new card but billing won't let me enter it in, it says I must verify my old card security code because I use more than one device. What do I do? Its cut up somewhere.

I looked up how to change it and in both my home settings, and regular account store settings it says I must verify my old card's security code which I do not have. This is really ******* me off. I haven't had a problem before, do I need to create a whole other apple ID and try that way?
Please any body with any knowledge I would really appreciate the help,
Thanks

I have switched credit cards in the past and haven't run into anything like this before. It's been a while but I've never seen this message.
Did you try removing the old credit card by selecting the "none" option and then go back in and try to add the card again?

Can the card manager of jcop41 v2.2 support multiselect ?

I find the card manager of simulation of jcop can't be select on multi channel at the same time, but can the real card of jcop41?
can anyone tell me?

All JCOP products have by default only the basic logical channel enabled. The reason is that it shall be GP compliant, and GP spec says that the CardManager must be multiple selectable if multiple logical channels are supported. The CM in JCOP is not multi selectable. If you don't care about GP compliancy (at least on this issue), you can set up to 4 logical channels during pre-perso (JCRE_MODE, two lowest bits).

Hdiutil: verify failed - corrupt image

problem: sparseimage is not mountable and verify ends with a "hdiutil: verify failed - corrupt image".
cause: tiger crashed and the image was mounted. the only way to boot was power down the machine. after the reboot the image was not mountable anymore.
thats the verbose output:
hdiutil verify -verbose conti.sparseimage
hdiutil: verify: processing "conti.sparseimage"
DIBackingStoreInstantiatorProbe: interface 0, score 100, CBSDBackingStore
DIBackingStoreInstantiatorProbe: interface 1, score -1000, CRAMBackingStore
DIBackingStoreInstantiatorProbe: interface 2, score 100, CCarbonBackingStore
DIBackingStoreInstantiatorProbe: interface 3, score -1000, CDevBackingStore
DIBackingStoreInstantiatorProbe: interface 4, score -1000, CCURLBackingStore
DIBackingStoreInstantiatorProbe: interface 5, score -1000, CVectoredBackingStore
DIBackingStoreInstantiatorProbe: selecting CBSDBackingStore
DIFileEncodingInstantiatorProbe: interface 0, score -1000, CMacBinaryEncoding
DIFileEncodingInstantiatorProbe: interface 1, score -1000, CAppleSingleEncoding
DIFileEncodingInstantiatorProbe: interface 2, score -1000, CEncryptedEncoding
DIFileEncodingInstantiatorProbe: nothing to select.
DIFileEncodingInstantiatorProbe: interface 0, score -1000, CUDIFEncoding
DIFileEncodingInstantiatorProbe: nothing to select.
DIFileEncodingInstantiatorProbe: interface 0, score -1000, CSegmentedNDIFEncoding
DIFileEncodingInstantiatorProbe: interface 1, score -1000, CSegmentedUDIFEncoding
DIFileEncodingInstantiatorProbe: interface 2, score -1000, CSegmentedUDIFRawEncoding
DIFileEncodingInstantiatorProbe: nothing to select.
DIDiskImageInstantiatorProbe: interface 0, score 0, CDARTDiskImage
DIDiskImageInstantiatorProbe: interface 1, score 0, CDiskCopy42DiskImage
DIDiskImageInstantiatorProbe: interface 2, score -1000, CNDIFDiskImage
DIDiskImageInstantiatorProbe: interface 3, score -1000, CUDIFDiskImage
DIDiskImageInstantiatorProbe: interface 5, score -100, CRawDiskImage
DIDiskImageInstantiatorProbe: interface 6, score -100, CShadowedDiskImage
DIDiskImageInstantiatorProbe: interface 7, score 1000, CSparseDiskImage
DIDiskImageInstantiatorProbe: interface 8, score -1000, CCFPlugInDiskImage
DIDiskImageInstantiatorProbe: interface 9, score -100, CWrappedDiskImage
DIDiskImageInstantiatorProbe: selecting CSparseDiskImage
DIDiskImageNewWithBackingStore: CSparseDiskImage
DIDiskImageNewWithBackingStore: instantiator returned 103
hdiutil: verify: unable to recognize "conti.sparseimage" as a disk image. (corrupt image)
hdiutil: verify: result: 103
hdiutil: verify failed - corrupt image
the problem is not that i dont have a backup of tha date within this 7GIG imagefile. the problem is now that i dont trust this format anymore. i do have a couple of AES-secured sparesimages FOR backup-reason (including one on my iPod) and if something happens to them i might be in serious trouble.
so now my question: is it possible to rescue this AES-secured spareseimage or is this kind of methos unsafe for important data?
thanks
klaus

Regular tools like Disk Utility and DiskWarrior
didn't solve anything. I was wondering if it is
possible to rescue some files by manually decrypting
the image with some low-level tool.
Did you have any succes? Given all reports on the
web, it seems a bit hopeless, but I like to give it a
chance.
no success at all, sorry.
i dumped the images now and also went back to some backups.
but i definitly don't use filevault anymore
cu

Select first n columns

Hi
I need to select first n columns thru a query. i dont know the column names.
Thanks and Regards
Ananth Antony

desc emp
EMPNO
ENAME
JOB
MGR
HIREDATE
SAL
COMM
DEPTNO
if n=3 means the output should be (i dont know the column name)
EMPNO ENAME JOB
7369 SMITH CLERK
7499 ALLEN SALESMAN
7521 WARD SALESMAN
7566 JONES MANAGER
7654 MARTIN SALESMAN
7698 BLAKE MANAGER
7782 CLARK MANAGER
7788 SCOTT ANALYST
7839 KING PRESIDENT
7844 TURNER SALESMAN
7876 ADAMS CLERK
EMPNO ENAME JOB
7900 JAMES CLERK
7902 FORD ANALYST
7934 MILLER CLERK
for emp Table.
Thanks
Ananth Antony

VERIFY fails if Card Manager selected first

Similar Messages

Maybe you are looking for