eutron – OpenCT

# Eutron CryptoIdentity ITSEC-P

The ITSEC-P token is supported by the "eutron" driver in OpenCT. Also see the CryptoIdentity IT-SEC page in the OpenSC Wiki. The ITSEC-P contains a G&D Starcos card. Only test versions of these cards are eraseable, the Cards inside the Eutron are not eraseable.

# Eutron CryptoIdentity ITSEC-I

(Andreas Jellinghaus:) I had one, wrote a driver for it, it worked fine. However somehow I locked it, and can't unlock it, so I can't test anymore. I guess they still work fine, but even for windows there is not unlock/format tool, as far as I can see.

Note that Eutron has five different CryptoIdentity tokens and the other four were not tested at all and are unsupported.

More detailed information on the progress of the Eutron support may be found at the Eutron entry in the opensc Wiki.

## Test results

If you have tested one of these readers, please add a report here.

Eutron Customer Service comments follows:

Please find below the link where you can download a tool to reinit CryptoIdentity ITSEC-I tokens.

You must first check which Infineon chip is onboard on CryptoIdentity; to check for smartcard ATR run: http://www.eutroninfosecurity.com/shared/test/CryptoIdentity/testatr2.exe ( http://www.eutroninfosecurity.com/shared/test/CryptoIdentity/testatr2.zip ) - if the ATR is "3b f2 98 00 ff c1 10 31 fe 55 c8 03 15", then the token is based on 320 chip, - if the ATR is "3b f2 98 00 ff c1 10 31 fe 55 c8 04 12", then the token is based on 322 chip

*** CryptoIdentity ITSEC REINIT TOOLS (Company confidential, please do not redistribute) ***

Please find below a link where you can download the tool for reinitialising tokens with inconsistent file systems. Note that this tool is not meant to be redistributed. Be aware that THIS TOOL WILL DESTROY ALL THE CONTENT OF THE TOKEN and revert it at manufacturing status.

http://www.eutroninfosecurity.com/outgoing/ci5-itsec/_INTERNALUSEONLY_/unsupported/ReInit32x_2.4.x.zip

( To obtain the Username and Password required during the download, please contact Eutron at helpdesk@… )

To use it, version 2.4.x of the Siemens API *must* be installed (see below for download instructions).

To reinitialize the token, follow these steps: 1 - Unzip the content in a temporary folder 2 - Shut down the Siemens "SCmon" or "SiSCmon" executable that may have been loaded in memory 3 - Plug the token into the USB port 4 - Run one of the batch files available; see txt file for command line instructions 4.1 - If you token has onboard the Infineon 320 chip you must use "reinit_gdo1.bat" 4.2 - If you token has onboard the Infineon 322 chip you must use "reinit_gdo2.bat" ( both will revert the token with Eutron standard manufacturing settings )

If required, download the latest release 2.4.0 build 10a of Siemens API from the following link: ( To obtain the Username and Password required during the download, please contact Eutron at helpdesk@… )

- Cryptographic API's only: http://www.eutroninfosecurity.com/outgoing/ci5-itsec/ci5-itsec_API_2.4.0_build10.exe or (zip format) http://www.eutroninfosecurity.com/outgoing/ci5-itsec/ci5-itsec_API_2.4.0_build10.zip

- Cryptographic API's + driver for CryptoIdentity token (official CD image): http://www.eutroninfosecurity.com/outgoing/ci5-itsec/CD_ci5-itsec.zip

The "readme" file contains additional important informations related to API installation and known issues: http://www.eutroninfosecurity.com/outgoing/ci5-itsec/readme.txt

For further technical information please send an email at helpdesk@…

Please note, that the Eutron tool initializes the token for the commercial PKI software shipped together with the Eutron Tokens and is not helpful, if you want to initialize your token for PKCS#15/opensc. See further informations on the status of the initialization support for Eutron tokens in Eutron entry in the opensc Wiki.