Bug 493211

Summary: SO enrollment fails when applet downgrade of the token from version 1.4.499dc06c to 1.3.44724DDE
Product: [Retired] Dogtag Certificate System Reporter: Asha Akkiangady <aakkiang>
Component: ESCAssignee: Jack Magne <jmagne>
Status: CLOSED EOL QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: alee, cryptosully
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-03-27 18:33:32 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 530474    
Attachments:
Description Flags
tps debug log attached
none
Screen shot of the error message during SO enrollment.
none
tps-debug log messages for enrollment operation with applet downgrade in WinXP-64 bit. none

Description Asha Akkiangady 2009-03-31 22:44:44 UTC
Created attachment 337418 [details]
tps debug log attached

Description of problem:
Security Officer enrollment fails when applet upgrade of the token from version 1.4.499dc06c to 1.3.44724DDE

Version-Release number of selected component (if applicable):
CS 8.0

How reproducible:


Steps to Reproduce:
1. TPS CS.cfg to have all profiles pointing to the applet version 1.4.499dc06c, restart TPS server.
2. token#1 is enrolled and formatted for SecurityOfficer#1 , applet version on the token is now 1.4.499dc06c
3. TPS CS.cfg to have all profiles pointing to the applet version  1.3.44724DDE, restart tps server.
4. enroll token#1 for SecurityOfficer#1.
  
Actual results:
Error (7), Smart card enrollment error.

Expected results:
Enrollment is complete.

Additional info:

Comment 1 Asha Akkiangady 2009-03-31 22:49:04 UTC
Created attachment 337420 [details]
Screen shot of the error message during SO enrollment.

Comment 2 Asha Akkiangady 2009-05-07 21:41:33 UTC
User token enrolment with applet downgrade from version 1.4.499dc06c to 1.3.44724DDE loads only encryption cert on the smart card., signing cert is not loaded.

Comment 3 Asha Akkiangady 2009-10-23 00:27:44 UTC
Applet downgrade from version 1.4.499dc06c to 1.3.44724DDE on Win-XP 64 bit fails. Tested enrollment operation with Safenet 330J cards, esc throws error "Enrollment of smart card failed. Error: The Smart Card Server cannot import the required certificates into your smart card."

Comment 4 Asha Akkiangady 2009-10-23 00:35:37 UTC
Created attachment 365800 [details]
tps-debug log messages for enrollment operation with applet downgrade in WinXP-64 bit.

Comment 5 Jack Magne 2009-10-23 00:54:04 UTC
I can't imagine that Win64 bit would have any effect on this issue that was discovered in the past.