Red Hat Bugzilla – Bug 493211
SO enrollment fails when applet downgrade of the token from version 1.4.499dc06c to 1.3.44724DDE
Last modified: 2015-01-04 19:13:50 EST
Created attachment 337418 [details]
tps debug log attached
Description of problem:
Security Officer enrollment fails when applet upgrade of the token from version 1.4.499dc06c to 1.3.44724DDE
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. TPS CS.cfg to have all profiles pointing to the applet version 1.4.499dc06c, restart TPS server.
2. token#1 is enrolled and formatted for SecurityOfficer#1 , applet version on the token is now 1.4.499dc06c
3. TPS CS.cfg to have all profiles pointing to the applet version 1.3.44724DDE, restart tps server.
4. enroll token#1 for SecurityOfficer#1.
Error (7), Smart card enrollment error.
Enrollment is complete.
Created attachment 337420 [details]
Screen shot of the error message during SO enrollment.
User token enrolment with applet downgrade from version 1.4.499dc06c to 1.3.44724DDE loads only encryption cert on the smart card., signing cert is not loaded.
Applet downgrade from version 1.4.499dc06c to 1.3.44724DDE on Win-XP 64 bit fails. Tested enrollment operation with Safenet 330J cards, esc throws error "Enrollment of smart card failed. Error: The Smart Card Server cannot import the required certificates into your smart card."
Created attachment 365800 [details]
tps-debug log messages for enrollment operation with applet downgrade in WinXP-64 bit.
I can't imagine that Win64 bit would have any effect on this issue that was discovered in the past.