Print This Post Print This Post

Swedish e-Legitimation, the Easy Way

Here are step-by-step instructions about how to get the Swedish e-Legitimation to work in Linux. The instructions are specifically for Nordea bank customers.

You need the “pocket calculator” cardreader (I used Todos NCR1), a suitable USB cable and a card with an EMV chip. If you have Nordea-issued bankkort or VISA you’re OK.

Note: These instructions are Debian-specific but they should work with other distros too with appropriate, slight changes.

Update: Signing will most likely be broken for you, but you can fix the signing too.


[ad#article]

Step 1. Get the driver + Nexus personal

Go to this Nordea page to download.

Interestingly, I could not find the page from within Nordea’s web page. Also, the information on that page was not in the same place as for the other OSs (Windows, MacOSX). No pain, no gain!

Step 2. Activate e-Legitimation on your card

Log in to Nordea’s web site. Then go to Vardagsärenden, e-legitimation, kort and choose activate. Sign with the Todos box as usual.

Click the link to go back to cards page. You should see your cards in Inaktiv status.

Click Aktivera. Tick the box for Uttag activation, and proceed.

Now you need to go to an ATM and make a money withdrawal. This will finally activate e-legitimation in your card by downloading some data from the bank.

Step 3. Install the software

Yeah, I wish it were all open source, in case of problems… but it’s not. Take a deep breath and prepare to install some Chinese driver binaries, plus a binary-only browser plugin, etc.

But first verify that you get printout like the following when you:

  • attach the USB cable to your Todos box
  • issue “dmesg” command


[4332544.912080] usb 2-3: new full speed USB device using ohci_hcd and address 4
[4332545.162128] usb 2-3: New USB device found, idVendor=0b0c, idProduct=002e
[4332545.162142] usb 2-3: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[4332545.162151] usb 2-3: Product: Nordea E-code
[4332545.162158] usb 2-3: Manufacturer: Todos Data System AB
[4332545.162369] usb 2-3: configuration #1 chosen from 1 choice

If that was OK, proceed. Otherwise make your USB work :)

Next, you need pcscd and libccid.

apt-get install pcscd and libccid

Unzip the Nexus and do as root:

./install.4.10.2.16.sh i

Unzip + install the driver:

unzip NCR1_Linux.zip

The zip contains a .deb so you’ll need to install it too:

dpkg --install NordeaDeb_1.0.0_i386.deb

Now the software part is done.

Step 4. Test drive

Restart Firefox.

Start Nexus application. Attach Todos reader NCR1 with USB cable. Insert your card. You should see something other than “Unknown” in it.

Nordea’s own test page is broken – they expect Microsoft Internet Explorer (maybe some ActiveX control too) for some totally screwball reason, I did not investigate this further. So it’s best to try e.g. Skatteverket’s page where you can check your Skattekonto.

Note: When prompted for a certificate, choose the certificate with “Basic PIN” in it. The other option did not work for me.

Enter your card PIN in the Todos box when prompted.

The web page should open properly, now you’ve got e-Legitimation!

5 Comments so far
Leave a comment

Thanks for the post! Do you know if there is a 64bit debian/ubuntu package for driver? NordeaDeb_1.0.0_i386 doesn’t work on my machine.

Rossen, you’re welcome!

As an answer to your question: unfortunately I don’t know if such a version exists :(

I recommend contacting either Nordea or Todos. Perhaps you’ll have better luck with Todos, since they’re the supplier for Nordea…

If you have installed ia32-libs and such, maybe you can try dpkg –force-architecture when installing the .deb. I’ve no idea if that will work or fail horribly, I’ve not tried that.

Anyway, if you get a reply, or find a solution, please post a comment about it, or send me mail!

NOTE: If you get a 403 even though your USB box is connected: go to Firefox preferences, choose Advanced, then Security Devices. Click Load, give it some nice name and point it to /usr/local/lib/personal/libP11.so.

Then you should see “Nordea e-Legitimation” appear in the list. You’re good to go.

First of all: thanks for the post. If it wouldn’t be for such a dedicated user community many people have probably dropped Linux when they faced problems like this.
However, I still have a problem. Firefox (3.6.12) would always crash for me when I had Nexus installed. To overcome that, and based on some threads in Ubuntu forum, I deleted libP11.so and managed to have Nexus working and detecting my card, without having Firefox crashing.

After I have installed libP11 through synaptic. The problem is that now I have exactly the 403 error you mention in your comment. I tried to add to Firefox the libP11.so.1 now available but it says “Unable to load module”.
Any ideas?

Sérgio, I hear you :)

I actually thought of changing bank because of this problem, until the problem was fixed to a satisfactory level.

Anyway, I think the reason is that the libP11 used with Nexus has to be the one which comes with the Nexus package. Otherwise I find it likely that there will be some compatibility problems.

I don’t know if this will help, but perhaps you could try this: remove the libP11 you installed via Synaptic, and (after reinstalling the libP11) point Firefox manually to the libP11 which lives under /usr/local/lib/personal.

An alternative is to see if there are updates for the Todos/Nexus package.

For me Firefox always dies when I pull the card out. Somehow I think this is intentional to enfore the shutdown of the browser (to get rid of any cached values etc.).

Additionally, you could also write to Nordea and/or Todos and ask for better Linux support. I wrote to Nordea, since the more people bug them the more this problem gets attention and eventually the situation might get better…



Leave a comment
Line and paragraph breaks automatic, e-mail address never displayed, HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Click to hear an audio file of the anti-spam word