CCR1009-8G-1S-1S+, Smart card and Certificates

RouterOS Beginner Basics
1

Hi,

I would like to ask, which type of smart card are supported in CCR1009-8G-1S-1S+ and how to import certificates from this smart card to CCR?

I was looking for it at Supported Hardware, but there is no mention about smart cards. So I have tried to use card from this seller ProID+, but without success.

CCR smart cards
How to use smart card slot in CCR?
Store The Dude database on SD card/USB stick on CCR?
how to use SIM slot in CCR1009-7G-1C-1S+
2

Card must support GlobalPlatform JavaCard

3

Is there any step-by-step tutorial, how to use Smart Card? Which card to buy and how to use it?

4

Guys… Really?
I can’t believe that nobody supports this undocumented feature on a high-end Mikrotik product!

5

I have ordered Gemalto (Safenet) TOP IM GX4 REV B SIM Pre-Cut - White from Amazon co uk.
I will soon post some results how (if) it works. Link to PDF specification

6

The card just arrived, however it does not work in CCR1009:

[admin@ccr] > /certificate card-reinstall pin=1234
failure: Install failed!
echo: certificate,critical it seems your card is not GlobalPlatform compatible!
[admin@ccr] > /certificate card-verify pin=1234    
failure: SIM not initialised!

The card surely does support GlobalPlatform, PIN I don’t know (no codes were in the package, so tried some common ones-maybe the card is now blocked?).
Contacted @support, but I don’t expect they will provide any solution to this.
On some rainy day I will try to get some sim card reader and connect it to the PC, so we will see…

7

Here’s some info that I’ve found

Going to order one of the SmartCafe and ACOSJ Cards once the supplier has some in to try and will post the results.

Would be nice if Mikrotik could provide some more information such as any cards they’ve tested along with any Java Card/GlobalPlatform minimum version requirements as some features do look be be dependent on this.

Does Mikrotik load a new Java applet onto the card when it is being initialized..? If so do we also need to ensure they come with default GlobalPlatform keys installed/requested during purchase..?

https://github.com/martinpaljak/GlobalPlatformPro
https://github.com/martinpaljak/GlobalPlatformPro/tree/master/docs/JavaCardBuyersGuide
https://github.com/martinpaljak/GlobalPlatformPro/tree/master/docs/TestedCards

https://www.smartcardfocus.com/shop/ilp/id~776/smartcafe-expert-6-0-80k-sim-cut/p/index.shtml
https://www.smartcardfocus.com/shop/ilp/id~790/acosj-dual-interface-java-card/p/index.shtml (Along with SIM Cut Service)

8

Any luck so far?

9

I’d be interested to know more too if anyone has found a compatible product and some guidelines on how to set up.

Thanks

10

I got a reply from @support: Unfortunately, we cannot recommend any Smart Card for use in MikroTik devices.
The Smart Card support in RouterOS requires significant rebuild and currently it is on hold due to higher priority projects.

11

In such case I’m afraid product pages of CCR routers require significant rebuild for example not to mention smart card interface availability if it’s in fact not available.

12

A year later: smart cards are still not working.

I volunteer myself to fix ROS source code to make smart cards working, if you, guys, in MK don’t have time to do it.

13

I’m also interested.

A.