gpa.exe hungs when click on "smartcards" AND scdaemon cannot recognise SC-HSM

Ingo Klöcker kloecker at kde.org
Sat Jun 25 13:08:49 CEST 2022


On Freitag, 24. Juni 2022 22:47:55 CEST Minas Argyrou via Gnupg-users wrote:
> I am tring it get GnuPG to work with my SmartCard-HSM 4K on Windows, using
> the GP4Win bundle.
> 
> Kleopatra doesn't recognise the SC-HSM 4K at all, even though, it DOES
> recognise the YubiKey 5 NFC in BOTH PIV and Openpgp Card apps.

Every smart card and every smart card reader is different and therefore it's 
sheer luck if scdaemon (and thus Kleopatra which relies entirely on scdaemon) 
supports a smart card or a reader that is not explicitly supported.

> When trying to use the GPA.exe alternative, it just freezes when I click on
> the "smartcards" button; not sure if it's related.

Maybe GPA doesn't handle the errors that scdaemon reports correctly. In any 
case, GPA is not actively developed or maintained anymore (https://
dev.gnupg.org/source/gpa/history/master/).

> I was never able to get the SC-HSM to work with GnuPG, even though it is 
> supposedly supported.

I'm not sure this is correct. According to `man scdaemon` some "SmartCard-HSM 
card application" is supported, but `man scdaemon` goes on "The SmartCard-HSM 
cards requires a card reader that supports Extended Length APDUs.". This 
implies that scdaemon supports some "SmartCard-HSM" that is available as a 
smart card which needs to be inserted into a smart card reader.

Your SC-HSM 4K seems to be a USB token, i.e. it includes a smart card reader. 
I guess it's _not_ supported by scdaemon and/or pcsc.

Regards,
Ingo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20220625/23763f50/attachment.sig>


More information about the Gnupg-users mailing list