card: Yubikey factory-reset failure
Closed, ResolvedPublic

Description

I have Yubikey with the firmware version 1.0.8.
Its ATR announces "unknown" for support of TERMINATE_DF/ACTIVATE, so, "factory-reset" command of gpg frontend doesn't work.

And for newer version (4.2.7, which I don't have) it seems that it is supported, but it goes into terminated state (and not activated).

Both cases, the method in the page at Yubico works:
https://developers.yubico.com/ykneo-openpgp/ResetApplet.html

gniibe created this task.Jul 19 2017, 12:59 AM
gniibe added a subscriber: justus.Aug 1 2017, 6:33 AM
gniibe added a comment.EditedAug 1 2017, 6:36 AM

This may fix the problem for new version 4.2.7:

According to Achim, the specification doesn't require RESET and SELECT_FILE between TERMINATE_DF and ACTIVATE_FILE.
Even the test version of V3.3 card failed with GnuPG 2.1.22.

This fix won't work with older Gnuk, which expect SELECT_FILE between TERMINATE_DF and ACTIVATE_FILE, but its effect is just an error for ACTIVATE_FILE and factory-reset works well.

werner moved this task from gpg21 to gpg22 on the gnupg board.Oct 20 2017, 2:00 PM
werner edited projects, added gnupg (gpg22); removed gnupg (gpg21).
werner added a subscriber: werner.Oct 26 2017, 4:58 PM

I am pretty sure that older cards required this behaviour. It might have been a workaround for a bug in scdaemon, though - I am not sure. So we should test this with all available card versions.

aa added a subscriber: aa.Oct 26 2017, 5:19 PM
This comment was removed by gniibe.
gniibe closed this task as Resolved.Oct 30 2017, 6:20 AM

D441 applied. Closed.