Bug 495765

Summary: Add Smart Card login (330J) registry entries in Windows installer.
Product: [Retired] Dogtag Certificate System Reporter: Jack Magne <jmagne>
Component: ESCAssignee: Jack Magne <jmagne>
Status: CLOSED ERRATA QA Contact: Chandrasekar Kannan <ckannan>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 1.0CC: aakkiang, alee, benl, mharmsen
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Windows   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-07-22 23:34:21 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 443788    

Description Jack Magne 2009-04-14 17:34:13 UTC
Description of problem:


In order to support smart card login, for the Safenet 330J, the following registry information must be set by the installer for ESC:

Windows Registry Editor Version 5.00


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Calais\SmartCards\SafeNet 330J]
"ATR"=hex:3b,ec,00,ff,81,31,fe,45,a0,00,00,00,56,33,33,30,4a,33,06,00,00
"ATRMask"=hex:ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,00,00
"Crypto Provider"="CoolKey PKCS #11 CSP"


This associates the ATR of the 330J with our already provided CoolKey CSP.
Also make sure that the entry for the Gemalto 64K is in order.

Comment 1 Jack Magne 2009-04-14 20:10:40 UTC
Proposed installer script fix for this issue:

$ cvs diff setup.iss
Index: setup.iss
===================================================================
RCS file: /cvs/dirsec/esc/win32/setup.iss,v
retrieving revision 1.6
diff -r1.6 setup.iss
453c453
< Root: HKLM; Subkey: Software\Microsoft\Cryptography\Calais\SmartCards\Gemalto
64K V2; ValueType: binary; ValueName: ATRMask: ValueData: ff ff ff ff ff ff ff f
f ff ff; Flags: uninsdeletekey
---
> Root: HKLM; Subkey: Software\Microsoft\Cryptography\Calais\SmartCards\Gemalto
64K V2; ValueType: binary; ValueName: ATRMask: ValueData: ff ff 00 ff 00 ff ff f
f 00 00; Flags: uninsdeletekey
457c457
< Root: HKLM; Subkey: Software\Microsoft\Cryptography\Calais\SmartCards\Gemalto
64 V2: ValueType: binary; ValueName: ATR; ValueData: 3b 95 95 40 ff ae 01 03 00
00
---
> Root: HKLM; Subkey: Software\Microsoft\Cryptography\Calais\SmartCards\Gemalto
64 V2: ValueType: binary; ValueName: ATR; ValueData: 3b 95 00 40 00 ae 01 03 00
00
458a459,464
> ; Now register the Safenet 330J
> Root: HKLM; Subkey: Software\Microsoft\Cryptography\Calais\SmartCards\Safenet
330J: ValueType: binary; ValueName: ATRMask: ValueData: ff ff ff ff ff ff ff ff
ff ff ff ff ff ff ff ff ff ff ff 00 00; Flags: uninsdeletekey
>
> Root: HKLM; Subkey: Software\Microsoft\Cryptography\Calais\SmartCards\Safenet
330J: ValueType: string; ValueName: Crypt Provider: ValueData: CoolKey PKCS #11
CSP
>
> Root: HKLM; Subkey: Software\Microsoft\Cryptography\Calais\SmartCards\Safenet
330J: ValueType: binary; ValueName: ATR; ValueData: 3b ec 00 ff 81 31 fe 45 a0 0
0 00 00 56 33 33 30 4a 33 06 00 00

Comment 2 Matthew Harmsen 2009-04-15 00:41:17 UTC
Comment #1 +mharmsen

Comment 3 Jack Magne 2009-04-15 01:35:56 UTC
$ cvs -d :ext:jmagne.redhat.com/cvs/dirsec commit setup.iss
Enter passphrase for key '/home/jack/.ssh/id_rsa':
Checking in setup.iss;
/cvs/dirsec/esc/win32/setup.iss,v  <--  setup.iss
new revision: 1.7; previous revision: 1.6
done
Running syncmail...
Mailing relnotes...
...syncmail done.
Running syncmail...
Mailing cvsdirsec...
...syncmail done.

Fix will appear in next build.

Comment 4 Asha Akkiangady 2009-06-09 23:24:00 UTC
Verified.

Installed ESC SmartCardManagerSetup-1.1.0-5.win32.i386.exe on Vista, verified that registry entries are created for Safenet 330J and Gemalto 64K with the right values.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Calais\SmartCards\SafeNet
330J]
"ATR"=3b,ec,00,ff,81,31,fe,45,a0,00,00,00,56,33,33,30,4a,33,06,00,00
"ATRMask"=ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,00,00
"Crypto Provider"="CoolKey PKCS #11 CSP"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Calais\SmartCards\Gemalto 64K V2]
"ATR"=3b 95 95 40 ff ae 01 03 00 00
"ATRMask"=ff ff 00 ff 00 ff ff ff 00 00
"Crypto Provider"="CoolKey PKCS #11 CSP"