CkPython

ScMinidriver - Import a Certificate and Private Key to a Smart Card or USB Token

See more ScMinidriver Examples

Demonstrates how to import a certificate and its private key to a key container on a smart card or USB token.

Note: This functionality was introduced in Chilkat v9.5.0.87.

Note: The ScMinidriver functionality is for Windows-only because ScMinidriver DLLs only exist on Windows.

CkPython

import sys
import chilkat

success = False

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

scmd = chilkat.CkScMinidriver()

# Reader names (smart card readers or USB tokens) can be discovered
# via List Readers or Find Smart Cards
readerName = "SCM Microsystems Inc. SCR33x USB Smart Card Reader 0"
success = scmd.AcquireContext(readerName)
if (success == False):
    print(scmd.lastErrorText())
    sys.exit()

# If successful, the name of the currently inserted smart card is available:
print("Card name: " + scmd.cardName())

# To import a cert + private key, we'll need to be PIN authenticated.
# For more details about smart card PIN authentication, see the Smart Card PIN Authentication Example
pinId = "user"
retval = scmd.PinAuthenticate(pinId,"000000")
if (retval != 0):
    print("PIN Authentication failed.")
    scmd.DeleteContext()
    sys.exit()

cert = chilkat.CkCert()

# Load the cert + private key from a .p12/.pfx
# We got this .p12 from https://badssl.com/download/
password = "badssl.com"
success = cert.LoadPfxFile("qa_data/pfx/badssl.com-client.p12",password)
if (success == False):
    print(cert.lastErrorText())
    scmd.DeleteContext()
    sys.exit()

# Let's import this certificate as the "signature" key/cert in key container #6.
containerIndex = 6
keySpec = "sig"
success = scmd.ImportCert(cert,containerIndex,keySpec,pinId)
if (success == False):
    print(scmd.lastErrorText())
else:
    print("Successfully imported the cert + private key onto the smart card.")

# When finished with operations that required authentication, you may if you wish, deauthenticate the session.
success = scmd.PinDeauthenticate("user")
if (success == False):
    print(scmd.lastErrorText())

# Delete the context when finished with the card.
success = scmd.DeleteContext()
if (success == False):
    print(scmd.lastErrorText())