Token operations fail during summetric key update in Red Hat Certificate System 8.1
Environment
- Red Hat Certificate System 8.1.x
Issue
- When attempting to format or enroll a smart card that requires symmetric key version 65 through 80, operation fails with the following error in tks debug log:
[Error=Problem diversifying key data.] TKS Key Change Over request failed
Resolution
- Bugzilla Your text to link here... has been opened to address this issue.
Root Cause
- Some card manufacturers require different symmetric key versions.
- TPS does not currently handle certain binary numbers as they get translated into ASCII characters when switched to hex.
This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.
Comments