search

CSIS / EnrollmentStation

Enrollment Station for enrolling Yubico smart cards in a Windows PKI
Other
46 stars 19 forks source link

Using YubicoLib to set the PIN retries #35

Open DSBloom opened 6 years ago

DSBloom commented 6 years ago

I am trying to use the code from the ADD-TRIESCONFIG branch and not having any luck.

Using the method public bool ChangePinPukRetries(byte pinRetryCount, byte pukRetryCount) This line return code == YubicoPivReturnCode.YKPIV_OK && sw == YubikeyPivNative.SW_SUCCESS returns false, because SW is returned as 27010, which is SW_ERR_SECURITY_STATUS and not 0x9000 (or its decimal equivilent)

Digging deeper, the SW is a Status Word, and is outlined here: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-73-4.pdf (Section 5.6)

I am getting back 69 and 82, which according to that pdf means Security status not satisfied