# Pinpad Readers

OpenSC supports two types of pinpad readers: PC/SC and CT-API.

PC/SC functionality is based on PC/SC v2 part 10 v2.02.05 and is supported by drivers on Windows (check your hardware manufacturer for latest drivers), Linux and Mac OS X Leopard with the open source CCID driver ( CCID spec). Make sure that you have the latest released versions (or SVN snapshots) of all relevant software: operating system, pcsc-lite, reader driver, reader firmware.

CT-API drivers are most used and available on Windows.

Pinpads tend to be buggy and not all combinations of cards and readers and PIN formats or pinpad reader features (such as displays) have been tested so far, so make sure you report issues to the MailingLists (opensc-devel)

## Known and tested pinpad readers with CT-API drivers on Windows

Please feel free to add your hardware and experiences here.

Class 2 readers have a pinpad for secure pin entry. Sometimes they are plugged between computer and keyboard so they use the keyboard for pin entry but capture the keystrokes before they reach the computer.

Class 3 readers have pinpad and a display.

Reader | OS | Type | CT-API library | Comments
SCM STR 391 "CashMouse?" | Win32 | Class 3 USB | CTRSRW32.dll | Works fine with Win32, no Unix support planned
Cherry G83-6700 Smartboard | Win32 | Class 2 PS/2 | CTMGR.DLL | A keyboard integrated reader which uses the keyboard for pin entry. Buggy CT-API driver, I got it working but not without patching OpenCT. No known Unix support
Reiner SCT cyberJack pinpad | Win32 | Class 2 USB | CTRSCT32.DLL | According to the manufacturer's website it should also run on Linux, but I haven't managed it.
Reiner SCT cyberJack keyboard | Win32 | Class 2 PS/2 | CTRSCT32.DLL | A cheap class 2 solution. It uses the keyboard for pin entry. No known Unix support.
SCM SPR 332, 532 "Chipdrive Pinpad" | Win32 & Linux | Class 2 USB | CTPCSC32.dll | A widely used CCID compliant reader. I also got it working on Linux following Martin's CardReaders?/SPR532 suggestions
Xiring XiPass | Win32 | Class 3 PS/2 | PC/SC only | Works well with Win32, pinpad entry works with EstEID CSP, no official Unix support, still there is an openct driver for it.
Reiner SCT cyberjack pinpad | Mac OS X | Class 2 USB | with pcscd | If you start the pcscd per hand it works well with the Drivers provided by Reiner SCT. I haven't managed to entry the pin with the Reader's keyboard
Reiner SCT cyberJack pinpad | Linux | Class 2 USB | Reiner SCT CT-API driver | Class 2 Smartcard reader with official LGPL drivers (packages for most linux distributions). Pinpad fully supported (tested on SuSE 10.2). Good Linux support!

Kobil and OmniKey also offer pinpad readers, if someone could test one of those with OpenSC feedback would be appreceated.

## Testing Pinpad

In opensc source you will find src/tests/pintest tool. It allows you to test if your card+reader combination support pinpad.

Before testing pinpad, you may need to erase and initialise pin. Make sure you understand what you are doing, as these commands will erase your smart card:

    pkcs15-init -E
    pkcs15-init --create-pkcs15 --profile pkcs15+onepin \
                --use-default-transport-key --pin 0000 --puk 111111 \
                --label "Test"

Then run the pin test:

    cd opensc/src/tests;
    ./pintest

The following messages are displayed:

    Using libopensc version 0.12.0-svn.
    Card detected in reader 'Feitian SCR301 00 00'
    Connecting... connected.
    ATR = 3b:9f:95:81:31:fe:9f:00:65:46:53:05:30:06:71:df:00:00:00:81:61:10:c6
    Looking for a PKCS#15 compatible Smart Card... found.
    Enumerating PIN codes...
    PIN [User PIN]
    	Com. Flags  : private, modifiable
    	Auth ID     : 01
    	Flags       : [0x30], initialized, needs-padding
    	Length      : min_len:4, max_len:16, stored_len:16
    	Pad char    : 0x00
    	Reference   : 1
    	Encoding    : ASCII-numeric
    	Path        : 3f005015
    Please enter PIN code [User PIN]:

Enter pin code. You should read:

    PIN code correct.

When using a smart card reader with pinpad, you may need to hit return on the computer keyboard and then enter pin on the pinpad reader.