Dart

ScMinidriver - Import a Certificate to IDPrime MD T=0 Smart Card

See more ScMinidriver Examples

Demonstrates how to import a certificate and its private key to a key container on an ID Prime MD T=0 smartcard.

Note: Requires Chilkat v9.5.0.88 or later. This example only runs on Windows because ScMinidriver is a Windows-only class.

Dart

import 'package:chilkat/chilkat.dart';

void main() {
  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  final scmd = CkScMinidriver();

  // Reader names (smart card readers or USB tokens) can be discovered
  // via List Readers or Find Smart Cards
  final readerName = 'SCM Microsystems Inc. SCR33x USB Smart Card Reader 0';
  try {
    scmd.acquireContext(readerName);
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  // If successful, the name of the currently inserted smart card is available:
  print('Card name: ${scmd.cardName}');

  // The IDPRime MD smart card has 4 different PIN roles:
  // "user" -- Primary Card PIN
  // "admin" -- Administrator PIN
  // "3" -- Digital Signature PIN
  // "4" -- Unblock only PIN (PUK)
  // To import a certificate to the "IDPrime MD T=0" smart card, we must first PIN authenticate using "user", and then also PIN authenticate using "3" (the Digital Signature PIN)
  final pinId = 'user';
  // (Of course, use your PIN which may be different than "0000")
  var retval = scmd.pinAuthenticate(pinId, '0000');
  if (retval != 0) {
    print('PIN Authentication failed.');
    scmd.deleteContext();
    return;
  }

  final cert = CkCert();

  // Load the cert + private key from a .p12/.pfx
  // We got this .p12 from https://badssl.com/download/
  final password = 'badssl.com';
  try {
    cert.loadPfxFile('qa_data/pfx/badssl.com-client.p12', password);
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    scmd.deleteContext();
    return;
  }

  // Also authenticate using "3", the digital signature PIN.
  // (Of course, use your PIN which may be different than "12345678")
  retval = scmd.pinAuthenticate('3', '12345678');
  if (retval != 0) {
    print('PIN Authentication failed.');
    scmd.deleteContext();
    return;
  }

  // Let's import this certificate as the "signature" key/cert in key container #6.
  final containerIndex = 6;
  final keySpec = 'sig';
  // Note the last argument (the pin ID) is "3".  This is the required PIN ID for the IDPrime MD T=0 smart card.
  try {
    scmd.importCert(cert, containerIndex, keySpec, '3');
    print('Successfully imported the cert + private key onto the smart card.');
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
  }

  // Delete the context when finished with the card.
  try {
    scmd.deleteContext();
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
  }
}