Want to highlight a helpful answer? Upvote!

Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

urbinasol Author

Level 1

8 points

USB Card Reader (Gemalto) fails after updating to El Capitan

Really annoying 😟

I Had my Gemalto USB Card reader perfectly working with my installed Firefox and now it does not appear any more as a security device.

Tried desperately to reboot the iMac with the usb card reader plugged but no way 😟 Gooooood ! urgently need to have it back working

As it was before this failing update to El Capitan, Gemalto says at http://support.gemalto.com/?id=pc_usb_sl#.Vic2JhDhAUF that PKCS#11 / CCID Drivers are supossed to be already at the OSx .....no need to install it from outside.

Please help !

ALl I see at sytem log when I plug the reader :

Oct 21 09:02:47 herri01 Finder[522]: osascript(1037) System Policy: deny scripting-addition-send 'HUBC'/'load'

Oct 21 09:02:52 herri01 Finder[522]: osascript(1038) System Policy: deny scripting-addition-send 'HUBC'/'load'

Oct 21 09:02:52 herri01 com.apple.SecurityServer[80]: Token reader Gemalto PC Twin Reader inserted into system

Oct 21 09:02:52 herri01 com.apple.SecurityServer[80]: reader Gemalto PC Twin Reader: state changed 0 -> 18

Oct 21 09:02:57 herri01 Finder[522]: osascript(1039) System Policy: deny scripting-addition-send 'HUBC'/'load'

Oct 21 09:03:02 herri01 Finder[522]: osascript(1040) System Policy: deny scripting-addition-send 'HUBC'/'load'

iMac, OS X El Capitan (10.11)

Posted on Oct 21, 2015 12:04 AM

19 replies

urbinasol Author

Level 1

8 points

Jan 21, 2016 7:08 AM in response to ludovic1

Hi Ludovic your Help and Ed Newman's are sinceresly appreciated. However, I think none has hit the bulls eye yet.

My pcsctest shows the card connects right :

MUSCLE PC/SC Lite Test Program

Testing SCardEstablishContext : Command successful.

Testing SCardGetStatusChange

Please insert a working reader : Command successful.

Testing SCardListReaders : Command successful.

Reader 01: Gemalto PC Twin Reader

Enter the reader number : 01

Waiting for card insertion

: Command successful.

Testing SCardConnect : Command successful.

Testing SCardStatus : Command successful.

Current Reader Name : Gemalto PC Twin Reader

Current Reader State : 0x54

Current Reader Protocol : 0x1

Current Reader ATR Size : 25 (0x19)

Current Reader ATR Value : 3B FF 18 00 00 81 31 FE 45 00 6B 11 05 07 00 01 21 01 43 4E 53 10 31 80 4A

Indeed the green led of the reader stays for some seconds. After some seconds, the led starts blinking and the card shows disconnected 😟

Me I am using just the Mac OSx El Capitan 10.11.2. If I try to pass the USB Gemalto Card Reader to a VirtualBox Window guest machine is right the same.

The trouble is, we did not change nothing absolutely, nor the card nor the reader ...nothing, but the OSx from Yosemite to El Capitan ....that was all and that's what broke it 😟

bilak

Level 1

0 points

Jan 25, 2016 4:16 AM in response to urbinasol

It's still not working in 10.11.3 😟

apple please fix it

urbinasol Author

Level 1

8 points

Jan 28, 2016 9:52 AM in response to bilak

Hi there ! The public entity who provide my Card + Certificate has finally developed a firmware which got my Card working ! Got it !

Here the spanish link for those whom such firmware could be useful :

http://www.izenpe.com/contenidos/informacion/software_izenpe/es_def/adjuntos/ize npe-middleware-3.1.0.0.dmg

May 25, 2016 4:00 PM in response to urbinasol

Hi urbinasol,

The solution with the new drivers installation that you posted didn't work for me.

After struggling with this problem for several months, I realized that El Capitan creates a "System Integrity Protection" (SIP) around several system folders and in the process deletes all third-party drivers from the /usr/lib/ directory. This includes the ClassicClient folder that is supposed to be in that directory, and specifically the libgclib.dylib driver. So I was getting an error "File /usr/lib/ClassicClient/libgclib.dylib not found."

The ClassicClient folder and the driver were moved (probably with the upgrade from Yosemite) to a /usr/local/lib/ directory, which you can write to, but for whatever reason, my system failed to look for the driver there. So after realizing this the solution was simple: create the /usr/lib/ClassicClient/ folder manually, and insert the libgclib.dylib in there.

However, in order to write to the /usr/lib/ folder you have to disable the SIP first, and to do that you have to restart in recovery mode - after the reset hold the [Command]+[R] keys until you see the recovery screen. Then, from the Utilities menu, select Terminal, and then type

csrutil disable; reboot

You can find more about SIP and how to disable it here: http://www.imore.com/el-capitan-system-integrity-protection-helps-keep-malware-a way

After this second reboot, you can log in as administrator, and copy the ClassicClilent folder from /usr/local/lib/ to /usr/lib/ . In order to access the /usr/lib/ folder, you need to choose "Go/Go to Folder" from the Finder menu and enter /usr/lib/ and click the Go button.

So now it works again, finally!

I don't think that removing the drivers indiscriminately was a good idea from Apple, but then, who are we to say ......

USB Card Reader (Gemalto) fails after updating to El Capitan