Smartcard Login was not enabled: an unknown smartcard error has occurred

HCL Domino Domino Forum
1

I am starting to evaluate the use of one new smartcard with Lotus Notes. I have download Lotus Notes client Trial to make this evaluation.I have install in “Your Identity/Your Smartcard” correctly the PKCS#11 driver for these cards and it look to be done correctly.

When I’ll try to “Enable Smartcard Login…”, Notes asks me for the PIN of my card, untill here all works well, even if I write an incorrect PIN, Notes give the message of Wrong PIN, so it looks that driver is right conected and Notes could reach the card. The problem is that after that Notes show me next error message “Smartcard Login was not enabled: an unknown smartcard error has occurred”.

Do you know if I need any specific data estructure created in the card?

Is there any special configuration in the card to support this Notes login?

Any information related this topic will be welcome

Sorry for my english

Many Thanks

Daniel

2

Subject: Need more info…

What version of Notes are you using, and what version of what smartcard software are you using?

3

Subject: RE: Need more info…

Thanks Dave,I download last Trial version of Lotus Notes available in Internet, version 6.5.4

Card i am using is one NTT cards, Sharp component with 1Mb of EEPROM.

I don’t know if the problem could be that in this Trial version i have my user with expiration date. Other possibility could be that cards should have some especific configuration of PKCS#11.

Thanks again

Daniel

4

Subject: Please set a few notes.ini parameters…

We’ve never tested with those tokens, so I can’t give you a solid answer one way or the other.The best way to find out what is going wrong would be to set DEBUG_PKCS11=3 in your notes.ini file, along with DEBUG_OUTFILE=. That will result in a great deal of information relating to the PKCS#11 calls being logged to the specified file. If you could shut down Notes, set those notes.ini variables, restart Notes, and then attempt to smartcard-enable an ID file and post the resulting log file here, that might give me an idea about where things are going wrong.

dave

5

Subject: RE: Please set a few notes.ini parameters…

Dear Dave,Here you could see the result of the execution of the “Smartcards Login” with Debug mode

14/07/2005 12:10:00,02 [0824:0002-0ABC] InitializeSmartCard> Found PKCS #11 DLL path: C:\Proyectos\Distrito C\Drivers\ELCRinstaller\program files\ELCR\PKCS11.dll

14/07/2005 12:10:00,02 [0824:0002-0ABC] InitializeSmartCard> Successfully loaded PKCS #11 DLL

14/07/2005 12:10:00,02 [0824:0002-0ABC] InitializeSmartCard> C_GetFunctionList found in library at 0x42F5DA0

14/07/2005 12:10:00,02 [0824:0002-0ABC] C_Initialize> Entering

14/07/2005 12:10:00,15 [0824:0002-0ABC] C_Initialize> Succeeded

14/07/2005 12:10:00,15 [0824:0002-0ABC] C_GetInfo> Entering

14/07/2005 12:10:00,15 [0824:0002-0ABC] C_GetInfo> Succeeded

14/07/2005 12:10:00,15 [0824:0002-0ABC] C_GetSlotList> Entering – requesting number of slots – all slots

14/07/2005 12:10:00,15 [0824:0002-0ABC] C_GetSlotList> Succeeded – 1 slot(s) found

14/07/2005 12:10:00,15 [0824:0002-0ABC] C_GetSlotList> Entering – requesting list of slot IDs

14/07/2005 12:10:00,15 [0824:0002-0ABC] C_GetSlotList> Succeeded

14/07/2005 12:10:12,87 [0824:0002-0ABC] C_OpenSession> Entering – slot 1 for read

14/07/2005 12:10:13,82 [0824:0002-0ABC] C_OpenSession> Succeeded – session 1

14/07/2005 12:10:13,82 [0824:0002-0ABC] C_Logout> Entering – session 1

14/07/2005 12:10:13,82 [0824:0002-0ABC] C_Logout> Failed – session 1 [0x101]

14/07/2005 12:10:13,82 [0824:0002-0ABC] C_GetSessionInfo> Entering – session 1

14/07/2005 12:10:13,82 [0824:0002-0ABC] C_GetSessionInfo> Request on session 1 succeeded

14/07/2005 12:10:13,82 [0824:0002-0ABC] C_CloseSession> Entering – session 1

14/07/2005 12:10:13,84 [0824:0002-0ABC] C_CloseSession> Succeeded – session 1

14/07/2005 12:10:14,32 [0824:0002-0ABC] C_GetMechanismList> Get number of supported mechanisms – Entering

14/07/2005 12:10:14,74 [0824:0002-0ABC] C_GetMechanismList> Fill in mechanism list – Entering

14/07/2005 12:10:15,18 [0824:0002-0ABC] C_GetMechanismInfo> Fill in desired mechanism info – Entering

14/07/2005 12:10:15,66 [0824:0002-0ABC] C_GetMechanismList> Get number of supported mechanisms – Entering

14/07/2005 12:10:16,16 [0824:0002-0ABC] C_GetMechanismList> Fill in mechanism list – Entering

14/07/2005 12:10:16,59 [0824:0002-0ABC] C_GetMechanismInfo> Fill in desired mechanism info – Entering

14/07/2005 12:10:23,07 [0824:0002-0ABC] C_OpenSession> Entering – slot 1 for read

14/07/2005 12:10:23,93 [0824:0002-0ABC] C_OpenSession> Succeeded – session 2

14/07/2005 12:10:23,93 [0824:0002-0ABC] C_Login> Entering – session 2

14/07/2005 12:10:24,05 [0824:0002-0ABC] C_Login> Succeeded – session 2

14/07/2005 12:10:24,05 [0824:0002-0ABC] C_GetSessionInfo> Entering – session 2

14/07/2005 12:10:24,05 [0824:0002-0ABC] C_GetSessionInfo> Request on session 2 succeeded

14/07/2005 12:10:24,05 [0824:0002-0ABC] C_OpenSession> Entering – slot 1 for read

14/07/2005 12:10:24,05 [0824:0002-0ABC] C_OpenSession> Succeeded – session 3

14/07/2005 12:10:24,05 [0824:0002-0ABC] C_GetTokenInfo> Entering – slot 1

14/07/2005 12:10:24,18 [0824:0002-0ABC] C_GetTokenInfo> Request succeeded, returning manufacturer and serial

14/07/2005 12:10:24,18 [0824:0002-0ABC] C_FindObjectsInit> Entering

14/07/2005 12:10:24,18 [0824:0002-0ABC] C_FindObjectsInit> Succeeded

14/07/2005 12:10:24,18 [0824:0002-0ABC] C_EnumerateObjects> Entering

14/07/2005 12:10:24,19 [0824:0002-0ABC] C_EnumerateObjects> Succeeded – 0 objects returned

14/07/2005 12:10:24,19 [0824:0002-0ABC] C_FindObjectsFinal> Entering

14/07/2005 12:10:24,19 [0824:0002-0ABC] C_FindObjectsFinal> Succeeded

14/07/2005 12:10:24,19 [0824:0002-0ABC] C_CloseSession> Entering – session 3

14/07/2005 12:10:24,19 [0824:0002-0ABC] C_CloseSession> Succeeded – session 3

14/07/2005 12:10:24,32 [0824:0002-0ABC] C_GetSessionInfo> Entering – session 2

14/07/2005 12:10:24,32 [0824:0002-0ABC] C_GetSessionInfo> Request on session 2 succeeded

14/07/2005 12:10:24,32 [0824:0002-0ABC] C_GetMechanismList> Get number of supported mechanisms – Entering

14/07/2005 12:10:24,32 [0824:0002-0ABC] C_GetMechanismList> Fill in mechanism list – Entering

14/07/2005 12:10:24,32 [0824:0002-0ABC] C_GetMechanismInfo> Fill in desired mechanism info – Entering

14/07/2005 12:10:24,32 [0824:0002-0ABC] C_GetMechanismList> Get number of supported mechanisms – Entering

14/07/2005 12:10:24,32 [0824:0002-0ABC] C_GetMechanismList> Fill in mechanism list – Entering

14/07/2005 12:10:24,32 [0824:0002-0ABC] C_GetMechanismInfo> Fill in desired mechanism info – Entering

14/07/2005 12:10:24,32 [0824:0002-0ABC] C_OpenSession> Entering – slot 1 for write

14/07/2005 12:10:24,34 [0824:0002-0ABC] C_OpenSession> Succeeded – session 4

14/07/2005 12:10:24,34 [0824:0002-0ABC] C_GetTokenInfo> Entering – slot 1

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_GetTokenInfo> Request succeeded, returning manufacturer and serial

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_FindObjectsInit> Entering

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_FindObjectsInit> Succeeded

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_EnumerateObjects> Entering

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_EnumerateObjects> Succeeded – 0 objects returned

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_FindObjectsFinal> Entering

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_FindObjectsFinal> Succeeded

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_CreateObject> Entering

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_CreateObject> Failed [0x13]

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_CloseSession> Entering – session 4

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_CloseSession> Succeeded – session 4

14/07/2005 12:10:24,46 [0824:0002-0ABC] C_CloseAllSessions> Entering – slot 1

14/07/2005 12:10:24,48 [0824:0002-0ABC] C_CloseAllSessions> Succeeded

14/07/2005 12:10:24,48 [0824:0002-0ABC] C_Finalize> Entering

14/07/2005 12:10:24,48 [0824:0002-0ABC] C_Finalize> Succeeded

14/07/2005 12:10:24,48 [0824:0002-0ABC] TerminateSmartCard> Freeing PKCS #11 library

I hope this helps to know whioch could be the problem

Thanks

Daniel

6

Subject: Looks like a buggy (or possibly read-only) token…

The call to C_CreateObject to create the “password object” on the token is failing with an error of CKR_ATTRIBUTE_VALUE_INVALID (0x13). Since Notes uses legal attribute values, this is probably due to a bug in the token or token sotware.

Do you know if this token is read-only? One explanation might be that this token doesn’t allow applications to create data objects, and that it is just returning an unusually un-helpful error code.

dave