Skip to main content
Skip table of contents

Release notes Personal Desktop Client 5.12

Release date: 2024-03-08

Jira ticket number



Initial support for ECC keys and certificates

ECC keys, certificates, and crypto operations are now supported in Personal Desktop Client over PKCS#11 interface and in Windows minidriver.

The macOS CryptoTokenKit extension has not been updated yet, ECC support on macOS is limited to PKCS#11. Enhanced support is planned for future releases.

ECC support has been added only to CardOS 5.0+ cards. Generating and importing ECC keys is currently only supported for up to 256-bit curves. The following curves are are supported:

  • secp192k1 (

  • secp192r1 aka prime192v1 (1.2.840.10045.3.1.1)

  • secp224r1 (

  • secp256k1 (

  • secp256r1 aka prime256v1 (1.2.840.10045.3.1.7)

  • brainpoolP160r1 (

  • brainpoolP192r1 (

  • brainpoolP224r1 (

  • brainpoolP256r1 (


Support for D-Trust 5.1 and 5.4 profiles with ECC

The D-Trust 5.1 and 5.4 profiles that use ECC keys and certificates are now supported by Personal Desktop Client. Similar to RSA profiles, users must use the D-Trust Card Assistant for PIN activation, modification, and the unblock functionality.


Add BUILTIN_ICCSN variable to .cpf

It is possible to use the BUILTIN_ICCSN variable in .cpf files to read ICCSN (chip serial number) from the card.


Increase CTK.CloseP11SessionsDelay to 900 seconds

The default value for CTK.CloseP11SessionsDelay is now set to 900 seconds. This is used for PIN caching in the CryptoTokenKit extension.

Contact and support

For information regarding support, training, and other services in your area, visit Nexus offers maintenance and support services to customers and partners.

For more information, go to Nexus Technical Support or contact your local sales representative.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.