Jump to content

Dell CAC Card Reader Tear Down


Recommended Posts

Quick Note: This was a quick tear down of a Dell SK-3106, standard issue for the United States Military but it is just as easy for a civilian to purchase one. Original Large photos are in my Flickr Stream.


hxxps://ascp.monmouth.army.mil/scp/downloads/ standardspolicy_files/Army_CAC_PKI_Program.pdf

hxxp://www.smartcardbasics. com/cardtypes.html

Now the part you guys want, pics :)

This is your standard CAC(SMART) Card.


Here is the I/O layout for the gold contacts.


Reader on the Keyboard


Back of the Keyboard


Controller for both the CAC reader and the keyboard its self.







CAC card shots:





Thats all for tonight.. maybe sometime next week i will play more with it and see what all i can do, edit data, execute arb. code? But now i DRINK!

Link to comment
Share on other sites

Is the I/O layout for the gold contacts almost for every card the same? Cause I've an electronic ID card for a couple of years and I wonder if I could mess with it :P

I believe so. You might run into problems with protection though, some cards lock you out (IIRC they actually self-distruct and blow a tiny fuse) if you try to tamper with them and fail. Some smart cards (SIM cards for example) use 6 pins, so I'd imagine you'd need a different reader. I believe the pinouts are the same on most cards that share the same number of pins.

Link to comment
Share on other sites

i have a few cards that a local business uses to pay out money to customers. i am thinking about using an acetone solution and just letting it eat away at the plastic, however if any of the other electronics inside are shielded with a plastic coating then... it just wont work.. so when i take apart a card i will post pics on this thread as well.

The all the chips are from the same manufacture and the documentation is pretty well written

Applications: hxxp://support.gemalto. com/?id=199#310

Documentation: hxxp://support.gemalto. com/fileadmin/user_upload/user_guide/GemPC410/GemCore_v1.21_Reference_Manual.pdf

Link to comment
Share on other sites

Today i tore down the keyboard and ripped out the...keys lol.. and started tinkering.. This is what i found in the first 5mins or so... There is a reed that, when compressed, activates the reader its self... so i soldered a old reset button i had that way i can tell it to switch on and off with out a card being in... Also the cards do not stay mounted very long, about 15 secs, so i am looking for a way to make it stay mounted, meaning the led goes off after a bit.


Original reed that the card depresses when inserted:


Back side:(r12 and r14 are the switches reads)


New switch soldered on:(i was using a Cold/Heat so excuse the sloppiness)





LED activated from the new switch:


this is a little more complicated then i had first thought.. but still a fun take down

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...