You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »


USB SMART CARD READER DRIVERS


OS X has built-in support for USB CCID class-compliant smart card readers. For other readers, install the reader driver in /usr/libexec/SmartCardServices/driversEach driver is a bundle.

The bundle contains an XML file Info.plist which contains the device’s USB vendor ID and product ID. For detailed description of plist format and how to write driver, see <http://pcsclite.alioth.debian.org/api/group__IFDHandler.html>


with macOS Mojave (10.14.6) it is still possible to install your own version of libccid or other PC/SC IFD Handler bundles to /usr/local/libexec/SmartCardServices/drivers.


SMART CARD APDU LOGGING


It is possible to turn on logging for smart cards. Logging is turned on by setting global preference:

sudo defaults write /Library/Preferences/com.apple.security.smartcard Logging -bool yes

After a smart card reader is connected (or after reboot) all operations including contents of sent and received APDU messages are then logged into system log. Logging uses facility com.apple.security.smartcard.log so it is possible to set up filtering of these logs into custom targets (see asl.conf(5))

Note that logging setting is one-shot; it must be turned on by the command above to start logging again with a new reader. This is to avoid security risk that logging is turned on indefinitely.

So, set this value to yes, plug in your AirID via USB and you should see APDU tracing. After the AirID is unplugged from USB, APDU tracing is disabled again.


  • No labels