Broadcom 5880 Smart Card Reader

[warnellg]

I'm running an Ubuntu 14.04 host and a Windows 7 guest. My laptop has a Broadcom 5880 smart card reader, which I need to use in the guest. I can pass it to the guest through the USB devices menu and some drivers do install. The Windows 7 guest device manager even reports that everything is working as normal. But when I put a smart card in to the reader, nothing actually happens.

This all works just fine in VMware player.

I've seen a couple older posts asking about this issue, but no resolution. Has anyone gotten this to work?

[mpack]

There may be a separate mechanism for media change events.

Is the host device name for the card always the same? If so I'd forget USB and just access it as a shared folder. USB can't be shared, so if you insist on using the card via USB then the host will lose access to it, and I can't imagine why that would be desirable.

[warnellg]

I'm not sure I follow. The smart card isn't being used as a storage device: it instead holds an authentication token that I need in order to interact with several applications. The 5880 provides an interface to these tokens.

[mpack]

Ah, my mistake. I thought you meant an sdcard or similar. In that case, lacking familiarity with the card in question I'll now leave you for someone else. One final thing I'd check for is if the card creates multiple endpoints (e.g reader and card separate, maybe more) - in which case you need filters for all.

[bmwsandman]

I'm running an Ubuntu 14.04 host and a Windows 7 guest. My laptop has a Broadcom 5880 smart card reader, which I need to use in the guest. I can pass it to the guest through the USB devices menu and some drivers do install. The Windows 7 guest device manager even reports that everything is working as normal. But when I put a smart card in to the reader, nothing actually happens.

This all works just fine in VMware player.

I've seen a couple older posts asking about this issue, but no resolution. Has anyone gotten this to work?

did you every find a solution to this? if so, can you post it.

[socratis]

Please read the following series of posts: USB basics and troubleshooting.

The Broadcom card most probably is locked at system startup from a service or a daemon. Could you check your host's services?

[bmwsandman]

there aren't any specific Broadcom services; only standard windows services related to the Smartcard

Any thoughts as to why the same setup works in VMware Player?

[socratis]

1. I'm on an OSX system.
2. I do not have VMWare player, neither can I have one.
3. I do not have a Broadcom 5880 Smart card reader. If I had one on a Windows system I would most probably have solved it by following the next step.
4. If you want this resolved in VirtualBox, you should follow the troubleshooting steps for VirtualBox. See: USB basics and troubleshooting, #7: Troubleshooting. I want to see the output from the 3rd party diagnostics tools and the diagnostics from VirtualBox.

[bmwsandman]

attached is a log file from the virtualbox cmds.

a search did not return any results/links to a diag tool. Can you point me in the right direction to download the diag tools

[socratis]

a search did not return any results/links to a diag tool

A search? Why would you need to search? I gave you the link to the troubleshooting guide. In part #7, par. 3 of the troubleshooting guide it lists three different tools for Windows hosts. Use them to make sure that the IDs are correct. You can use these tools later again in your VM to make sure that the USB device is captured correctly and found/discovered by the system.

Also, 1) tell me the exact version of your host, and 2) open a command prompt and post the output of:

• net start

[bmwsandman]

I found the diag tool reference earlier and have USBDeview running
my host is Windows 7 Enterprise SP1
Using the cmd ver it reports

Code: Select all

Version 6.1.7601

These Windows services are started:

Code: Select all

   Adobe Acrobat Update Service
   Alps HID Monitor Service
   AMD External Events Utility
   Application Experience
   Application Information
   Application Management
   Background Intelligent Transfer Service
   Base Filtering Engine
   Blue Coat Unified Agent
   Bluetooth Device Monitor
   Bluetooth Media Service
   Bluetooth OBEX Service
   Bluetooth Support Service
   Certificate Propagation
   Cisco AnyConnect Secure Mobility Agent
   Cisco AnyConnect Secure Mobility ISE Posture Agent
   CNG Key Isolation
   COM+ Event System
   COM+ System Application
   Commvault Client Manager Service (Instance001)
   Commvault Communications Service (Instance001)
   Computer Browser
   Credential Manager
   Credential Vault Host Control Service
   Credential Vault Host Storage
   Cryptographic Services
   DCOM Server Process Launcher
   Desktop Window Manager Session Manager
   DHCP Client
   Diagnostic Policy Service
   Diagnostics Tracking Service
   Distributed Link Tracking Client
   Distributed Transaction Coordinator
   DNS Client
   EAFRCliManager
   Encrypting File System (EFS)
   Energy Server Service queencreek
   Extensible Authentication Protocol
   ForeScout SecureConnector Service
   Function Discovery Provider Host
   Group Policy Client
   Human Interface Device Access
   IKE and AuthIP IPsec Keying Modules
   Intel Bluetooth Service
   Intel(R) HD Graphics Control Panel Service
   Intel(R) PROSet/Wireless Event Log
   Intel(R) PROSet/Wireless Registry Service
   Intel(R) PROSet/Wireless Zero Configuration Service
   Intel(R) Smart Connect Technology Agent
   Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK
   IP Helper
   IPsec Policy Agent
   Microsoft EMET Service
   Multimedia Class Scheduler
   Netlogon
   Network Connections
   Network List Service
   Network Location Awareness
   Network Store Interface Service
   O2FLASH
   Offline Files
   Plug and Play
   Power
   Print Spooler
   Program Compatibility Assistant Service
   Protected Storage
   Realtek Audio Service
   Remote Desktop Configuration
   Remote Desktop Services
   Remote Desktop Services UserMode Port Redirector
   Remote Procedure Call (RPC)
   Remote Registry
   Removable Storage Mgmt Service
   Removable Storage Service
   RPC Endpoint Mapper
   SDIOAssist
   Secondary Logon
   Security Accounts Manager
   Security Center
   Server
   Shell Hardware Detection
   Smart Card
   Smart Card Removal Policy
   SMS Agent Host
   Software Protection
   Superfetch
   Symantec Endpoint Protection
   System Event Notification Service
   Tablet PC Input Service
   Task Scheduler
   TCP/IP NetBIOS Helper
   Themes
   User Profile Service
   VMware Authorization Service
   VMware DHCP Service
   VMware NAT Service
   VMware USB Arbitration Service
   WebClient
   Windows Audio
   Windows Audio Endpoint Builder
   Windows Connect Now - Config Registrar
   Windows Driver Foundation - User-mode Driver Framework
   Windows Event Log
   Windows Firewall
   Windows Font Cache Service
   Windows Image Acquisition (WIA)
   Windows Management Instrumentation
   Windows Mobile-2003-based device connectivity
   Windows Mobile-based device connectivity
   Windows Presentation Foundation Font Cache 3.0.0.0
   Windows Search
   Windows Time
   Windows Update
   WinHTTP Web Proxy Auto-Discovery Service
   Wired AutoConfig
   WLAN AutoConfig
   Workstation

[socratis]

there aren't any specific Broadcom services; only standard windows services related to the Smartcard

Well, according to the list that you gave me and when I compared it with two Win7 installations, the following were not included in any of them:

Code: Select all

Adobe Acrobat Update Service
Alps HID Monitor Service
Application Management
Blue Coat Unified Agent
Bluetooth Device Monitor
Bluetooth Media Service
Bluetooth OBEX Service
Bluetooth Support Service
Certificate Propagation
Cisco AnyConnect Secure Mobility Agent
Cisco AnyConnect Secure Mobility ISE Posture Agent
COM+ System Application
Commvault Client Manager Service (Instance001)
Commvault Communications Service (Instance001)
Credential Manager
Credential Vault Host Control Service
Credential Vault Host Storage
Distributed Transaction Coordinator
EAFRCliManager
Encrypting File System (EFS)
Energy Server Service queencreek
ForeScout SecureConnector Service
Human Interface Device Access
Intel Bluetooth Service
Intel(R) HD Graphics Control Panel Service
Intel(R) PROSet/Wireless Event Log
Intel(R) PROSet/Wireless Registry Service
Intel(R) PROSet/Wireless Zero Configuration Service
Intel(R) Smart Connect Technology Agent
Intel(R) System Usage Report Service SystemUsageReportSvc_QUEENCREEK
IPsec Policy Agent
Microsoft EMET Service
Netlogon
O2FLASH
Protected Storage
Realtek Audio Service
Remote Desktop Configuration
Remote Desktop Services
Remote Desktop Services UserMode Port Redirector
Remote Registry
Removable Storage Mgmt Service
Removable Storage Service
SDIOAssist
Secondary Logon
Smart Card
Smart Card Removal Policy
SMS Agent Host
Symantec Endpoint Protection
Tablet PC Input Service
VMware Authorization Service
VMware DHCP Service
VMware NAT Service
VMware USB Arbitration Service
WebClient
Windows Driver Foundation - User-mode Driver Framework
Windows Mobile-2003-based device connectivity
Windows Mobile-based device connectivity
Windows Presentation Foundation Font Cache 3.0.0.0
Windows Time
Wired AutoConfig

From these, I suspect the following that might be getting a hold on your Smart card:

Code: Select all

Certificate Propagation
Cisco AnyConnect Secure Mobility Agent
Cisco AnyConnect Secure Mobility ISE Posture Agent
Commvault Client Manager Service (Instance001)
Commvault Communications Service (Instance001)
Credential Manager
Credential Vault Host Control Service
Credential Vault Host Storage
Human Interface Device Access
O2FLASH
Protected Storage
Removable Storage Mgmt Service
Removable Storage Service
SDIOAssist
Secondary Logon
Smart Card
Smart Card Removal Policy
Tablet PC Input Service
VMware USB Arbitration Service

Which one, I really don't know. I would start with the "Smart Card *" ones. Stop them and then try to grab the smart card in your guest from the Devices » USB menu. If you succeed and you verify it in the guest with one of the three USB diagnostic tools, let me know.

[bmwsandman]

stopping the "Smart Card" service in the host, prevents the host from recognizing that a smartcard is inserted into the reader, but it has no effect on the guest OS.The guest OS still doesn't recognize when a card is inserted.

using USBDeview, the guest os, captures all the necessary usb devices related to the smart card reader.

are there any VB logs that would show you that the guest os isn't recognizing the smartcard?

[socratis]

The guest OS still doesn't recognize when a card is inserted.

That's four steps down the road. I suggest you stick to the plan. Step 1, get the reader recognized by the guest. That's where we are now. Step 2 would be the drivers (if any), step 3 would be an appropriate service in the guest and step 4 would be what you're looking for. So, do not hurry to go to 4.

using USBDeview, the guest os, captures all the necessary usb devices related to the smart card reader.

What does that mean exactly?

The VB logs will reveal absolutely nothing as far as the guest recognizing the card. I've laid down the path for this; release the reader from the host, select it from the Devices » USB menu (because you can't use a filter) and have it seen as a USB device in the guest.

[bmwsandman]

attached is the Guest OS device manager showing the card reader devices. all the card reader devices appear and have same driver versions as the Host.

the second pic is USBDeview from the guest OS showing the same 4 devices that show in USBDeview on the host (before capture)

regarding your Step3: all drivers and services seem to be enabled on the guest os