HSPD-12/PIV Cards (mostly Oberthur) Corrections

9 Dec 2009 Update:  This fix is only delivered in SRSS 4.2.  SRSS releases prior to that will require the work-around below.

Sun Ray & some supporting Sun engineering organizations have developed fixes to help recognize certain HSPD-12/PIV compliant cards for Sun Ray.  Recent HSPD-12/PIV Oberthur card releases...

  • Oberthur/ID-One Cosmo 64 v52D Fast ATR card
  • Oberthur Card Systems, PIV End Point Dual Interface 64K Smart Card
  • Oberthur CS v1.08 card

...are not recognized or produce erroneous tokens when inserted into a Sun Ray card reader. 

In the future, Sun Ray Engineering will release a patch to SRSS 4.0 & SRSS 4.1 which includes this fix. However, that release has been delayed due to higher priority activities.  Padu Iyer gave permission to release this via the ThinkThin blog.  Eventually this entry will be overcome by events (hopefully Padu or I will remember to update/retract this later).

Here's the fix...

  1. Download this file with the Oberthur card fixes
  2. Save file as OberthurCS.cfg into /etc/opt/SUNWut/smartcard directory on all Sun Ray servers
  3. Edit /etc/opt/SUNWut/smartcard/probe_order.conf
  4. After the 1st line comment (# EDIT WITH CARE...), add this:
    OberthurCS.cfg
  5. Save the file
  6. Cold restart Sun Ray services: utrestart -c

This has only been tested on SRSS 4.0 & 4.1. 

Thanks to Ramesh Nagappan, Marc Puverel & Padu Iyer for their support on this.

Comments:

I'm sorry, I can't read/respond to your comment. If it's a question could you repost in English, please?

Posted by madhatter on December 12, 2008 at 08:53 PM PST #

Post a Comment:
Comments are closed for this entry.
About

Think Thin is a collection of bloggers that work with Oracle's Virtual Desktop portfolio of products.

Search

Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today