[Pki-devel] Red Hat Certificate System - Token problem

[Carlos Franciosi]

Hi,
I've been working in a RHCS project for a year and now we have some problems with the format process of the tokens.

When we try to format the token with the ESC the following error appears:
"Formatting of smart card failed. Error:  The Smart Card Server cannot upgrade the software on your smart card."

We are using the Gemalto "USB eSeal Token V2" (http://www.gemalto.com/products/usb_eseal_token/). I've also tested the RSA sid800 with the same results.

Note: These tokens support Global Platform and JavaCard standards !
 
I've also checked the /var/log/pki-tps/tps-error.log and I found the following:
 
 [2010-04-03 04:06:32] f39a83f0 RA_Processor::SelectApplet - Bad Response
 [2010-04-03 04:06:32] f39a83f0 RA_Processor::SelectApplet - Bad Response
 [2010-04-03 04:06:32] f39a83f0 RA_Processor::GetStatus - Bad Response
 [2010-04-03 04:06:32] f39a83f0 RA_Processor::GetAppletVersion - Bad Response
 [2010-04-03 04:06:40] f39a83f0 RA_Processor::SelectApplet - Bad Response
 [2010-04-03 04:06:40] f39a83f0 RA_Processor::SetupSecureChannel - Failed to create a secure channel - potentially due to an RA/TKS key mismatch or differing RA/TKS key versions.
 [2010-04-03 04:06:40] f39a83f0 RA_Processor::UpgradeApplet - channel creation failure
 [2010-04-03 04:06:40] f39a83f0 RA_Processor::SelectApplet - Bad Response
 
Any help would be much appreciated.

Ing. Carlos Franciosi - RHCA / RHCDS
Regional Solution Architect