Lua Requires Chilkat v9.5.0.88+

ScMinidriver - Import a Certificate to IDPrime MD T=0 Smart Card

See more ScMinidriver Examples

Demonstrates how to import a certificate and its private key to a key container on an ID Prime MD T=0 smartcard.

Note: This example only runs on Windows because ScMinidriver is a Windows-only class.

Lua

local chilkat = require("chilkat")

-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

local scmd = chilkat.ScMinidriver.new()

-- Reader names (smart card readers or USB tokens) can be discovered
-- via List Readers or Find Smart Cards
local readerName = "SCM Microsystems Inc. SCR33x USB Smart Card Reader 0"
local success = scmd:acquire_context(readerName)
if not success then
    print(scmd.last_error_text)
    return
end

-- If successful, the name of the currently inserted smart card is available:
print("Card name: " .. scmd.card_name)

-- The IDPRime MD smart card has 4 different PIN roles:
-- "user" -- Primary Card PIN
-- "admin" -- Administrator PIN
-- "3" -- Digital Signature PIN
-- "4" -- Unblock only PIN (PUK)
-- To import a certificate to the "IDPrime MD T=0" smart card, we must first PIN authenticate using "user", and then also PIN authenticate using "3" (the Digital Signature PIN)
local pinId = "user"
-- (Of course, use your PIN which may be different than "0000")
local retval = scmd:pin_authenticate(pinId, "0000")
if retval ~= 0 then
    print("PIN Authentication failed.")
    scmd:delete_context()
    return
end

local cert = chilkat.Cert.new()

-- Load the cert + private key from a .p12/.pfx
-- We got this .p12 from https://badssl.com/download/
local password = "badssl.com"
success = cert:load_pfx_file("qa_data/pfx/badssl.com-client.p12", password)
if not success then
    print(cert.last_error_text)
    scmd:delete_context()
    return
end

-- Also authenticate using "3", the digital signature PIN.
-- (Of course, use your PIN which may be different than "12345678")
retval = scmd:pin_authenticate("3", "12345678")
if retval ~= 0 then
    print("PIN Authentication failed.")
    scmd:delete_context()
    return
end

-- Let's import this certificate as the "signature" key/cert in key container #6.
local containerIndex = 6
local keySpec = "sig"
-- Note the last argument (the pin ID) is "3".  This is the required PIN ID for the IDPrime MD T=0 smart card.
success = scmd:import_cert(cert, containerIndex, keySpec, "3")
if not success then
    print(scmd.last_error_text)
else
    print("Successfully imported the cert + private key onto the smart card.")
end

-- Delete the context when finished with the card.
success = scmd:delete_context()
if not success then
    print(scmd.last_error_text)
end