CredentialProvider Unlock

This section specifies the behavior when inserting a smart card with locked PIN. The same entries as available for [CredentialProvider] may be specified. There is also some additional information that may be specified.

ChallengeResponse

This entry tells whether challenge-response should be used when unlocking the PIN.

0: Normal PUK used to unlock PIN. This is the default value.
1: Challenge-response used to unlock PIN

Timeout

This entry tells the number of seconds a challenge should be valid when using challenge/response mode.

The smart card will be locked during the operation, since the next call after generating the challenge should be the response. No other application will be able to access the smart card until the timeout is reached or the operation is finished/aborted.