(CkPython) ScMinidriver - Import a Certificate and Private Key to a Smart Card or USB Token

See more ScMinidriver Examples

Demonstrates how to import a certificate and its private key to a key container on a smart card or USB token.

Note: This functionality was introduced in Chilkat v9.5.0.87.

Note: The ScMinidriver functionality is for Windows-only because ScMinidriver DLLs only exist on Windows.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

scmd = chilkat.CkScMinidriver()

# Reader names (smart card readers or USB tokens) can be discovered
# via List Readers or Find Smart Cards
readerName = "SCM Microsystems Inc. SCR33x USB Smart Card Reader 0"
success = scmd.AcquireContext(readerName)
if (success == False):
    print(scmd.lastErrorText())
    sys.exit()

# If successful, the name of the currently inserted smart card is available:
print("Card name: " + scmd.cardName())

# To import a cert + private key, we'll need to be PIN authenticated.
# For more details about smart card PIN authentication, see the Smart Card PIN Authentication Example
pinId = "user"
retval = scmd.PinAuthenticate(pinId,"000000")
if (retval != 0):
    print("PIN Authentication failed.")
    scmd.DeleteContext()
    sys.exit()

cert = chilkat.CkCert()

# Load the cert + private key from a .p12/.pfx
# We got this .p12 from https://badssl.com/download/
password = "badssl.com"
success = cert.LoadPfxFile("qa_data/pfx/badssl.com-client.p12",password)
if (success == False):
    print(cert.lastErrorText())
    scmd.DeleteContext()
    sys.exit()

# Let's import this certificate as the "signature" key/cert in key container #6.
containerIndex = 6
keySpec = "sig"
success = scmd.ImportCert(cert,containerIndex,keySpec,pinId)
if (success == False):
    print(scmd.lastErrorText())
else:
    print("Successfully imported the cert + private key onto the smart card.")

# When finished with operations that required authentication, you may if you wish, deauthenticate the session.
success = scmd.PinDeauthenticate("user")
if (success == False):
    print(scmd.lastErrorText())

# Delete the context when finished with the card.
success = scmd.DeleteContext()
if (success == False):
    print(scmd.lastErrorText())