SmartCard pairing and PIN dialogues don't show up
Hi,
as the topic says, the SmartCard pairing and PIN dialogues don't show up on my system. We have configured other Macs with an identical setup and those machines work fine.
We use OpenSC for access to the cards, which works fine.
Firefox and Adobe Reader are able to access the certs on the card without any issues.
The card also works for authentication on the company's Windows machines.
Also, the necessary Root and Intermediate certs are installed in the system keychain (via MDM)
What I've checked/tested so far:
- pcsctest - successful
- pkcs11-tool --login --test - works
- pkcs11-tool --list-objects - works
- system_profiler SPSmartCardsDataType - shows all the certs
- sc_auth identities - lists identities
- sc_auth pairing_ui -s status - enabled
- security list-smartcards - lists the smartcard
- security smartcards token -l - is empty
- Clean install of macOS - issue still exists
- Reset SMC - issue still exists
Here's the errors I was able to find:
sc_auth verifypin
Verifying PIN of SmartCard in reader OMNIKEY AG 3121 USB
ERROR: Unable to select card application AID {length = 11, bytes = 0x<OBFUSCATED>}
sc_auth pairing_ui
Hangs
sc_auth pairing_ui -f
Causes ctkbind to throw this message:
No RSA decryption key or ECDH key was found for token: org.opensc-project.mac.opensctoken.OpenSCTokenApp.OpenSCToken:0208c11a000f242a
<Insert the Card>
Console.app shows this error for ctkbind (as above):
No RSA decryption key or ECDH key was found for token: org.opensc-project.mac.opensctoken.OpenSCTokenApp.OpenSCToken
I appreciate any help on this topic.
MacBook Pro 16″, macOS 12.5
