Applet not recognized by host app

[Aiosa]

An installed applet is not recognized by host applications when using NXP JCOP3 J3H145 card (sdk support up to 3.0.4) via Gemalto external card USB reader.

I tried to investigate using APDU tracer and noticed the desktop app is repeatedly sending select commands for different AID than project-defined

00 A4 04 00 07 A0 00 00 05 27 20 01 00 A4 04 00 08 A0 00 00 05 27 47 11 17

Therefore, I tried to compile with both these AIDs, but apart from select command succession, the applet is still not recognized.

Full description of desktop tracing:

**A0 00 00 05 27 20 01** > 00 A4 04 00 07 A0 00 00 05 27 20 01 > 79 03 01 00 02 71 08 AF 4F C6 D4 4F A4 42 61 90 00 selection succesfull, but the app did not try to send any other commands **A0 00 00 05 27 47 11 17** > 00 A4 04 00 08 A0 00 00 05 27 47 11 17 > 79 03 01 00 02 71 08 3C ED 63 0F 3E 47 D0 A8 90 00 > 00 1D 00 00 00 > 6D 00 **A0 00 00 05 27 21 01 01** (the project-default) > 00 A4 04 00 07 A0 00 00 05 27 20 01 > 6A 82 (file not found) > 00 A4 04 00 08 A0 00 00 05 27 47 11 17 > 6A 82 (file not found)

I tried to debug the android APP, when trying those aids

00 A4 04 00 07 A0 00 00 05 27 20 01 00 A4 04 00 08 A0 00 00 05 27 47 11 17

it said "OATH not repsent or disabled", with the project id it did not say/do anything.

Android app debug log when connection first non-project, then project-defined applet AID

``` D/yubikit: On tag: com.yubico.yubioath.ui.main.MainActivity@38a46a0 D/yubikit: OathApplication app SEND: 00 a4 04 00 08 a000000527210101 D/yubikit: OathApplication app RECV: 6a82 E/yubioath: Error using OathClient com.yubico.yubikitold.application.ApduException: APDU SW=0x6A82 at com.yubico.yubikitold.application.AbstractApplication.select(AbstractApplication.java:49) at com.yubico.yubikitold.application.oath.OathApplication.select(OathApplication.java:67) at com.yubico.yubioath.client.OathClient.(OathClient.kt:24) at com.yubico.yubioath.ui.BaseActivity.useTransport$suspendImpl(BaseActivity.kt:144) at com.yubico.yubioath.ui.BaseActivity.useTransport(Unknown Source:0) at com.yubico.yubioath.ui.main.MainActivity.useTransport(MainActivity.kt:119) at com.yubico.yubioath.ui.BaseActivity$onYubiKey$$inlined$let$lambda$1.invokeSuspend(BaseActivity.kt:126) at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33) at kotlinx.coroutines.DispatchedTask.run(Dispatched.kt:233) at android.os.Handler.handleCallback(Handler.java:883) at android.os.Handler.dispatchMessage(Handler.java:100) at android.os.Looper.loop(Looper.java:214) at com.yubico.yubikitold.YubiKitManager$YkIoWorker$1.run(YubiKitManager.java:133) at java.lang.Thread.run(Thread.java:919) D/yubikit: Set USB listener: null Set NFC listener: null D/yubikit: Set USB listener: com.yubico.yubioath.ui.main.MainActivity@38a46a0 D/yubikit: Set NFC listener: com.yubico.yubioath.ui.main.MainActivity@38a46a0 D/yubikit: Set USB listener: com.yubico.yubioath.ui.main.MainActivity@38a46a0 D/yubikit: On tag: com.yubico.yubioath.ui.main.MainActivity@38a46a0 D/yubikit: OathApplication app SEND: 00 a4 04 00 08 a000000527210101 D/yubikit: OathApplication app RECV: 79030100027108eb15adfd0dc56b329000 D/yubioath: Got API, checking requests... D/yubikit: OathApplication app SEND: 00 a4 00 01 0a 7408000000000324fbbf D/yubikit: OathApplication app RECV: 9000 D/yubikit: Set USB listener: com.yubico.yubioath.ui.main.MainActivity@38a46a0 ```

So unlike the desktop versions, android is sending select command with the aid equal to the project defined one - and the message "missing OATH" means no applet found on the card. Nice. Now just why it selects the applet and does not do anything else? The screen stays like when starting app - tap or insert your Yubikey.

Thanks

[Aiosa]

After some investigation it seems only yubikeys are supported. Pity.

[imakhalova]

Hello @Aiosa , It seems like your Android app works as actually expected. You just don't have any accounts yet, so it doesn't show you anything (UX needs to be a bit more polished). That would be the same experience as you will have if you tap new YubiKey. But I see that you were able to select applet and it returned you empty list of accounts. You can try and add new one by clicking Add fab button.

[Aiosa]

Thank you! I found some discussions on how yubico verifies the reader manufacturer and some other stuff to not to accept such cards, was a bit confused on how to do such things over NFC, maybe some card serial number or whatever.

[Aiosa]

It would be nice to find out the issue in the desktop AID mismatch though...