Smardcart Telesec Signature 3.0 card working?

[Bernhard Reiter]

Hi Werner,

Am Dienstag 24 Februar 2026 10:28:27 schrieb Werner Koch via Gnupg-users:
> On Mon, 23 Feb 2026 17:16, Bernhard Reiter said:
> > does somebody successfully run a Telesec Signature 3.0 card with gpgsm?
>
> The newer Telesec cards are based on TCOS 4 and we have only support for
> TCOS 3. 

okay, then potentially the Telesec CardManager.NET only uses the TCOS 3.
How can I find out?
(Should we take that conversation to gnupg-devel@?)

> But: 
>
>     scd:nks: Make newer TCOS signature cards work.
>
>     * scd/app-nks.c: Make appversion 232 an alias for 15.
>     --
>
>     I received a new QES signature card and it turned out that the
>     appversion was changed from 15 to 232.  I have no further information
>     but simply tried this patch and it worked as far as I can check: I was
>     able to init the PINs and PUKs using gpg-card and could also install
>     the extra certificates using the writcert command.  Signing with this
>     card also works.
>
> That seems to be a different one than the QES Signature Card I received
> in November.  You may try to use the same trick as I did.

Am I understand you correctly that adding the right appversion to the patch
would help? (As your hack is already in GnuPG 2.5.17 which is what I've 
tried.)

 
What is an easy way to find out about the appversion?
(I do not have mich experience with the card development. Is that the "
Detected NKS version: 125" in the log I've send?)

> I do have the specs for the TCOS 4 card (they are actually fast if you
> ask them) but not yet found the time to check the differences and
> implement it.  Will definitely help but my above hack (commit
> 17596e830f08e601f2ea5142343996d48dd2930b) is currently sufficient for me
> to sign documents with Okular.

Cool, thanks!
Bernhard

-- 
https://intevation.de/~bernhard   +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20260224/9c571ac8/attachment.sig>