Smart Card Connector

Enable Smart Card access on your Chromebook

This application provides basic support for Smart Cards on Chrome OS. In addition, the user is also required to install middleware apps compatible with their cards. Full instructions can be found in the online user manual <https://support.google.com/chrome/a/answer/7014689>. Users will be shown a permission dialog when third party apps attempt to connect to the Smart Card Connector. Granting these apps permission will provide these third parties access to your personal information such as the certificates on the smart card. It is recommended to grant permission only to third party apps you trust. For admins deploying this app to a larger organization, please follow the steps in the help center article <https://support.google.com/chrome/a/answer/7014520>. ------ New in version 1.7.0 (Nov 19, 2024): ChromeOS >=126 is required. Added support for the following readers: HID 5021 CL, Aladdin R.D. JCR SecurBio, FujitsuTechnologySolutions GmbH Dual Smartcard Reader D321, Ledger Stax, NXP Pegoda 3, authenton #⁠1- CTAP2.1. New in version 1.6.0 (Oct 30, 2024): Switch internal implementation from Native Client to WebAssembly. New in version 1.5.3 (May 28, 2024): Retry reader init on any error, and do USB reset after repetitive init errors. SCardCancel() will return SCARD_S_SUCCESS even if the client already finished. SCardConnect() & SCardReconnect() will now return SCARD_E_PROTO_MISMATCH if the application requests to use T=1 only but the reader does support T=0. Thread safety issues. New in version 1.5.2 (Apr 22, 2024): Added support for the following readers: AvidCard CAC Smart Card Reader. New in version 1.5.1 (Mar 25, 2024): Fix admin policy not being applied with some probability. Allowlist Net iD client extension. New in version 1.5.0 (Jan 17, 2024): Added support for the following readers: ACS ACR1552 1S CL Reader, ACS ACR1552 CL Reader, ACS ACR1581, ACS ACR40T ICC Reader, ACS ACR40U ICC Reader, ACS WalletMate 1S CL Reader, Aktiv Rutoken SCR 3101 NFC Reader, Alpha-Project ANGARA Token, Broadcom Corp 58200 (idProduct: 0x5864), Broadcom Corp 58200 (idProduct: 0x5865), CIRIGHT ONE PASS U2F, Dexon Tecnologias Digitais LTDA eSmartDX, Excelsecu Card reader, GHI NC001, Identiv uTrust Token Flex, Imprivata USB CCID, KAPELSE eS-KAP-Ad, Kapelse inSide, KAPELSE KAP-Care, KAPELSE KAP-eCV, KAPELSE KAP-GO, KAPELSE KAP-LINK2, Kapelse KAP-Move, Kapelse Ti-Kap, rf IDEAS USB CCID, SIMHUB pcsc reader, SpringCard M519 with idProduct: 0x6212, SpringCard M519 with idProduct: 0x621A, WCMi SD5931. Allowlist IDmelon Accesskey extension. New in version 1.4.2 (Nov 14, 2023): Fix the regression introduced in 1.4.0 (random disconnections, slower card movement detection, occasional slot invisibility for multi-slot readers). New in version 1.4.1 (Oct 18, 2023): Fix crash or incorrect behavior in case of SCardConnect/Disconnect calls happening during the card insertion/removal. New in version 1.4.0 (Oct 9, 2023): Enable the backend for Chrome Web Smart Card API by default. Fix a possible crash in the USB subsystem. New in version 1.3.15.0 (Aug 22, 2023): Add experimental backend for Chrome Web Smart Card API (guarded by an admin policy). UI for notifying the user in case the application crashed. New in version 1.3.14.1 (Jul 27, 2023): Fix breakage on some composite readers like Rocketek. Fix occasional crash on MAX_ATR_SIZE when Lock Screen is enabled. Fix inability to self-restart after a crash. Reset PC/SC eventCounter when a reader is removed. Improve the JavaScript API to allow obtaining the error code directly. The minimum supported ChromeOS version is raised to 81. New in version 1.3.13.0 (Jun 28, 2023): Added support for the following readers: Access IS ATR220 with idProduct: 0x0184, Alcor Link AK9567, Alcor Link AK9572, BLUTRONICS TAURUS NFC, CHERRY SmartTerminal ST-1144, CREATOR CRT-603(CZ1) CCR, Dexon Tecnologias Digitais LTDA DXToken, ESMART Reader ER433x ICC, ESMART Reader ER773x Dual & 1S, Flight system consulting Incredist, KAPELSE KAP-LINK, LDU LANDI, Ledger Nano S, Ledger Nano S Plus, Ledger Nano SP, Ledger Nano X, SafeNet eToken Fusion, Sensyl SSC-HV Reader, Sensyl SSC-NFC Reader, Thales RF Reader, TOKEN2 MFA NFC Reader, TOKEN2 Molto2. Fix for an issue with AlcorMicro AU9560 and high-speed cards. Partially work around the occasional Inbound transfer overflow USB issue. Fix incorrect type declarations in api.js. Emit warning logs when client application sends concurrent PC/SC calls. Write logs to systemLog, when available (i.e., on ChromeOS >=111), to make them automatically added to feedback reports Remove misleading warning logs when unplugging a reader or switching to ChromeOS Lock Screen. New in version 1.3.10.1 (Oct 5, 2022): Added support for the following readers: ACS ACR122U PICC. Allowlist Ujambo kiosk apps. Fix smart card client library crashes when there's no background page in the calling extension. New in version 1.3.9.3 (Aug 9, 2022): Added support for the following readers: ACS ACR1281U, Circle CCR7125 ICC, Circle CIR125 ICC, Circle CIR125-DOT ICC, Circle CIR215 CL with iProduct 0x2100, Circle CIR315 DI, Circle CIR315 with idProduct: 0x0324, Circle CIR315 with idProduct: 0x7004, Circle CIR415 CL, Circle CIR515 ICC, Circle CIR615 CL, Circle CIR615 CL & 1S, ELYCTIS CL reader, Nitrokey Nitrokey 3, Thales Shield M4 Reader. Fix several race conditions and memory leaks. Fix ChromeOS lock-screen flaky access issues (on USB interface claiming). Allowlist ChromeOS Terminal System Web App. Add the scard_disconnect_fallback_client_app_ids admin policy. It allows to workaround client errors that try to switch card protocols without resetting the card. New in version 1.3.8.0 (Jun 27, 2022): Fix the regression in the client JS library (the addOnDisposeCallback method being unavailable). Add the ES module version of the client JS library and the support for Service Workers. New in version 1.3.7.2 (May 16, 2022): Added support for the following readers: ArkSigner Connect2Sign, Circle CCR7115 ICC, Circle CCR7315, Circle CIR215 CL, Circle CIR215 PICC, Circle CIR315, Circle CIR315 (idProduct: 0x3100), Circle CIR315 CL, Circle CIR315 Dual & 1S, Circle CIR415 CL & 1S, Circle Idaxis SecurePIV, DUALi DE-ABCM6 RFRW, Feitian R701, Generic EMV Smartcard Reader (0x058C:0x9590), Identiv Identiv uTrust 4711 F CL + SAM Reader, Identiv uTrust 3721 Contactless Reader, Infocrypt HWDSSL DEVICE, Infocrypt Token++ lite, INMAX DWR18 HC, INMAX DWR18 HPC, jSolutions s.r.o. Multi SIM card reader 4/8, Lenovo Lenovo Smartcard Wired Keyboard II, MK Technology KeyPass D1, REINER SCT tanJack USB, SafeNet eToken 5110+ FIPS, SafeNet eToken 5300 C, SoloKeys Solo 2, SONY Felica RC-S300/P, SONY Felica RC-S300/S, SONY Felica RC-S660/U, Spyrus Inc PocketVault P-3X (idProduct: 0x3203), SYNNIX CL-2100R. Allow vendor control commands for Omnikey 5427 CK. Support 4 card slots with Feitian R502 C9. Autoapprove a few kiosk client apps. Avoid spurious errors in UI for composite readers. Ask for bNumDataRatesSupported data rates. Fix a performance issue with T=1 and CCID_CLASS_AUTO_PPS_PROP. Gemalto pinpad: fix incorrect bEntryValidationCondition for SecurePINVerify and SecurePINModify. New in version 1.3.6.0 (Sep 20, 2021): Fix regression with bytes incorrectly serialized in the single-message-based protocol. New in version 1.3.5.0 (Sep 7, 2021): Added support for the following readers: ACS ACR1252IMP Reader, ACS CryptoMate EVO, Aktiv Rutoken SCR 3001 Reader, Avtor KP-375BLE, Avtor SC Reader KP382, BIT4ID mLector AIR DI V3, BIT4ID miniLector AIR NFC v3, Bit4id Digital-DNA Key (ProductID 0x2354), Canokeys Canokey, DESKO GmbH IDenty chrom, DESKO GmbH PENTA Scanner, FT Biopass CCID, FT Biopass FIDO2, FT Biopass KB CCID, FT Biopass KB FIDO CCID, Feitian BLE CCID Dongle, Feitian R805, Feitian vR504 Contactless Reader, GoTrust Idem Key, Identiv uTrust 3720 Contactless Reader, Sunrex HP USB Business Slim Smartcard CCID Keyboard, sysmocom - s.f.m.c. GmbH sysmoOCTSIM. Fail if the requested protocol is not supported by reader. Disable USB suspend for the AlcorMicro AU9520 reader. Return "no smart card" if we get notified during a transmit. Do not (possibly) lock a reader if allocating hCard fails Fix a hang in SCardTransmit. Do not report an error if the wrong interface is used by the driver. Update reader state when a card is removed during an exchange. PHSetProtocol(): supports T=0&1 cards on T=0 reader. Fix potential memory issues and crashes. Support CCIDCLASSDRIVER. New in version 1.3.3.0 (Oct 1, 2020): Added support for the following readers: Sunrex HP USB Business Slim Smartcard CCID Keyboard, ACS ACR1252IMP. ------ Note: This application contains third party code from various libraries and is open-sourced under the Apache License. The full source code can be found at <https://github.com/GoogleChromeLabs/chromeos_smart_card_connector>. Please see below for each library and associated license: CCID free software driver This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this library; if not, write to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA The complete licence is available at GNU Lesser General Public License, version 2.1 Chromium Copyright 2015 The Chromium Authors. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of Google Inc. nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Closure Compiler Copyright 2009 The Closure Compiler Authors. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Closure Library Copyright 2005 The Closure Library Authors. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. libusb Copyright libusb Authors. This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this library; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA PCSC lite project Copyright (c) 1999-2003 David Corcoran <corcoran@linuxnet.com> Copyright (c) 2001-2011 Ludovic Rousseau <ludovic.rousseau@free.fr> All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. The name of the author may not be used to endorse or promote products derived from this software without specific prior written permission. Changes to this license can be made only by the copyright author with explicit written consent. THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.