我正在尝试使用 GP4Win 捆绑包让 GnuPG 在 Windows 上与我的 SmartCard-HSM 4K 配合使用。
Kleopatra 根本无法识别 SC-HSM 4K,尽管它确实能够在PIV 和 OpenPGP 卡应用程序中识别 YubiKey 5 NFC。
当尝试使用 GPA.exe 替代方案时,当我单击“智能卡”按钮时,它会冻结;不确定是否有关系。尝试使用 CMD 进行调试:
scdaemon --server
serialno
我得到以下结果:
scdaemon[xxxxx]: detected reader 'ACS ACR38U 0' scdaemon[xxxxx]:
reader slot 0: not connected scdaemon[xxxxx]: pcsc_control failed:
invalid PC/SC error code (0x1) scdaemon[xxxxx]:
pcsc_vendor_specific_init: GET_FEATURE_REQUEST failed: 65547
scdaemon[xxxxx]: reader slot 0: active protocol: T1 scdaemon[xxxxx]:
slot 0: ATR=3bde18ff8191fe1fxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
scdaemon[xxxxx]: error parsing PrKDF record: Invalid object
scdaemon[xxxxx]: no supported card application found: Invalid object S
PINCACHE_PUT 0// ERR 100696144 No such device <SCD>
下面我包括我的配置文件。scdaemon.conf
###+++--- GPGConf ---+++###
verbose
verbose
verbose
verbose
verbose
verbose
verbose
verbose
verbose
disable-ccid
###+++--- GPGConf ---+++### 09/06/y22 23:29:33 GTB Daylight Time
# GPGConf edited this configuration file.
# It will disable options before this marked block, but it will
# never change anything below these lines.
#pcsc-shared
我已经尝试了 disable-ccid
和
pcsc-shared
的所有可能组合,但没有任何效果。gpgagent.conf
###+++--- GPGConf ---+++###
enable-extended-key-format
ignore-cache-for-signing
no-allow-external-cache
no-allow-loopback-pinentry
grab
pinentry-timeout 10
verbose
verbose
verbose
verbose
verbose
verbose
verbose
verbose
verbose
ssh-fingerprint-digest SHA384
###+++--- GPGConf ---+++### 18/04/y22 07:30:51 GTB Daylight Time
# GPGConf edited this configuration file.
# It will disable options before this marked block, but it will
# never change anything below these lines.
enable-putty-support
enable-ssh-support
use-standard-socket
default-cache-ttl 600
max-cache-ttl 7200
gpgsm.conf
###+++--- GPGConf ---+++###
auto-issuer-key-retrieve
enable-crl-checks
enable-ocsp
verbose
verbose
verbose
verbose
verbose
verbose
verbose
verbose
verbose
include-certs -1
cipher-algo AES256
###+++--- GPGConf ---+++### 01/04/y22 19:10:26 GTB Daylight Time
# GPGConf edited this configuration file.
# It will disable options before this marked block, but it will
# never change anything below these lines.
我从来没能让 SC-HSM 与 GnuPG 一起工作,尽管据说它是受支持的。除了 scdaemon.conf 之外,我没有使用过其他任何东西,但是,据我所知,即使在全新安装时使用默认设置,SC-HSM 也无法工作。该卡与其他所有东西都能很好地配合。