GnuPG" GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 (also known as PGP). GnuPG allows you to encrypt and sign your data and communications. "
GnuPG provides support of smart card using the OpenPGP application in the card or token. See "How to use the Fellowship Smartcard" for more details.
PC/SCPC/SC (defined by the PC/SC workgroup) is the "standard" way to access smart cards and smart card readers.
pcsc-lite is a Free Software implementation of the PC/SC standard often used in Unix systems.
pcscd is a daemon, part of pcsc-lite, accessing the smart card readers.
The problemBy default GnuPG has its own way to access smart cards with the help of the scdaemon helper process.
If you use GnuPG and also PC/SC on the same system you may have problems.
scdaemon get accessIf scdaemon is started before pcscd then the smart card reader will not be available at the PC/SC level.
In pcscd logs you get the error:
ccid_usb.c:653:OpenUSBByName() Can't claim interface 1/12: LIBUSB_ERROR_BUSY
pcscd get accessIf pcscd is started before scdaemon then the smart card will not be available at the GnuPG level.
You get the error:
$ gpg --card-status gpg: selecting openpgp failed: No such device gpg: OpenPGP card not available: No such device
It is becoming a FAQ (Debian bug #925312, github issue) so I decided to document possible solutions.
Remove pcscd from your systemThe obvious solution to avoid the conflict is to remove one of the two participants.
If you use your smart card only with GnuPG then you can remove pcscd entirely.
But if you have pcscd installed it may be for a good reason. You may want/need to use PC/SC for other applications.
Tell GnuPG to use PC/SCAnother solution is to make GnuPG and pcscd collaborate to work together.
Luckily it is possible to do that using the scdaemon option
From the documentation:
With this option scdaemon will use PC/SC to talk to the smart card and the conflict is solved.
It is possible to tell scdaemon to always use this option by editing the scdaemon configuration file. By default it is ~/.gnupg/scdaemon.conf and it should contain the line:
If you try to make it work be sure to kill any running scdaemon process so that it is restarted with the new option.
ConclusionI don't know if the problem comes from pcscd or from GnuPG.
The good news is that there is a solution.