aboutsummaryrefslogtreecommitdiffstats
path: root/doc/scdaemon.texi
diff options
context:
space:
mode:
Diffstat (limited to 'doc/scdaemon.texi')
-rw-r--r--doc/scdaemon.texi31
1 files changed, 29 insertions, 2 deletions
diff --git a/doc/scdaemon.texi b/doc/scdaemon.texi
index f069a9fb8..134ca40df 100644
--- a/doc/scdaemon.texi
+++ b/doc/scdaemon.texi
@@ -478,12 +478,39 @@ TO BE WRITTEN.
@node Scdaemon PASSWD
@subsection Change PINs.
-TO BE WRITTEN.
+@example
+ PASSWD [--reset] @var{chvno}
+@end example
+
+Change the PIN or reset the retry counter of the card holder
+verification vector number @var{chvno}.
@node Scdaemon CHECKPIN
@subsection Perform a VERIFY operation.
-TO BE WRITTEN.
+@example
+ CHECKPIN @var{idstr}
+@end example
+
+Perform a VERIFY operation without doing anything else. This may be
+used to initialize a the PIN cache earlier to long lasting
+operations. Its use is highly application dependent:
+
+@table @strong
+@item OpenPGP
+
+Perform a simple verify operation for CHV1 and CHV2, so that further
+operations won't ask for CHV2 and it is possible to do a cheap check on
+the PIN: If there is something wrong with the PIN entry system, only the
+regular CHV will get blocked and not the dangerous CHV3. @var{idstr} is
+the usual card's serial number in hex notation; an optional fingerprint
+part will get ignored.
+
+There is however a special mode if @var{idstr} is suffixed with the
+literal string @code{[CHV3]}: In this case the Admin PIN is checked if
+and only if the retry counter is still at 3.
+
+@end table