sysmoQMOD qmod-cardem not working on Raspberry Pi 4

General
1

Recently got a sysmoQMOD in order to remote test EAP-SIM/AKA and generate testing metrics.

Have managed to do this successfully with some single port USB card readers with pcscd.

The current issue is that I am unable to get the most basic of action working with the sysmoQMOD.
Cannot access any of the 4 sim slots.

Running pcscd_tools will not list or be able to make use of any of the 4 SIM card slots.

Followed: https://osmocom.org/projects/simtrace2/wiki/Flashing

OS tested: (All 64 bit)
Ubuntu 20.04
Ubuntu 22.04
Ubuntu 24.04
Raspbian 12
Debian 12

Steps followed:

apt install pcscd pcsc-tools dfu-util
systemctl enable --now pcscd

cd /tmp
wget https://ftp.osmocom.org/binaries/simtrace2/firmware/latest/qmod-cardem-dfu-latest.bin

dfu-util --list

Found Runtime: [1d50:4004] ver=0002, devnum=7, cfg=1, intf=2, path="1-1.4.1", alt=0, name="UNKNOWN", serial="51203220593931523330332038313034"
Found Runtime: [1d50:4004] ver=0002, devnum=8, cfg=1, intf=2, path="1-1.4.4", alt=0, name="UNKNOWN", serial="51203220593931523230342039333034"

Flashed latest FW sucessfully

dfu-util --device 1d50:4004 --cfg 1 --alt 1 --path "1-1.4.1" --reset --download qmod-cardem-dfu-latest.bin

dfu-util --device 1d50:4004 --cfg 1 --alt 1 --path "1-1.4.4" --reset --download qmod-cardem-dfu-latest.bin

dmesg output

[ 3080.376020] usb 1-1.4: new high-speed USB device number 20 using xhci_hcd
[ 3080.476530] usb 1-1.4: New USB device found, idVendor=1d50, idProduct=4002, bcdDevice= 0.00
[ 3080.476556] usb 1-1.4: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3080.476568] usb 1-1.4: Product: quad modem v2
[ 3080.476578] usb 1-1.4: Manufacturer: sysmocom - s.f.m.c. GmbH
[ 3080.478032] hub 1-1.4:1.0: USB hub found
[ 3080.478138] hub 1-1.4:1.0: 7 ports detected
[ 3080.771984] usb 1-1.4.1: new full-speed USB device number 21 using xhci_hcd
[ 3080.881262] usb 1-1.4.1: New USB device found, idVendor=1d50, idProduct=4004, bcdDevice= 0.02
[ 3080.881274] usb 1-1.4.1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 3080.881278] usb 1-1.4.1: Product: sysmoQMOD (Quad Modem)
[ 3080.881281] usb 1-1.4.1: Manufacturer: sysmocom - s.f.m.c. GmbH
[ 3080.881284] usb 1-1.4.1: SerialNumber: 51203220593931523330332038313034
[ 3081.427990] usb 1-1.4.4: new full-speed USB device number 22 using xhci_hcd
[ 3081.537237] usb 1-1.4.4: New USB device found, idVendor=1d50, idProduct=4004, bcdDevice= 0.02
[ 3081.537248] usb 1-1.4.4: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 3081.537252] usb 1-1.4.4: Product: sysmoQMOD (Quad Modem)
[ 3081.537256] usb 1-1.4.4: Manufacturer: sysmocom - s.f.m.c. GmbH
[ 3081.537259] usb 1-1.4.4: SerialNumber: 51203220593931523230342039333034
[ 3094.228160] usb 1-1.4.2: new high-speed USB device number 23 using xhci_hcd
[ 3094.338244] usb 1-1.4.2: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 3.18
[ 3094.338273] usb 1-1.4.2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 3094.338285] usb 1-1.4.2: Product: EG25-G
[ 3094.338295] usb 1-1.4.2: Manufacturer: Quectel
[ 3094.353544] option 1-1.4.2:1.0: GSM modem (1-port) converter detected
[ 3094.353914] usb 1-1.4.2: GSM modem (1-port) converter now attached to ttyUSB0
[ 3094.354335] option 1-1.4.2:1.1: GSM modem (1-port) converter detected
[ 3094.354585] usb 1-1.4.2: GSM modem (1-port) converter now attached to ttyUSB1
[ 3094.354999] option 1-1.4.2:1.2: GSM modem (1-port) converter detected
[ 3094.355242] usb 1-1.4.2: GSM modem (1-port) converter now attached to ttyUSB2
[ 3094.355662] option 1-1.4.2:1.3: GSM modem (1-port) converter detected
[ 3094.355923] usb 1-1.4.2: GSM modem (1-port) converter now attached to ttyUSB3
[ 3094.358019] qmi_wwan 1-1.4.2:1.4: cdc-wdm0: USB WDM device
[ 3094.359457] qmi_wwan 1-1.4.2:1.4 wwan0: register 'qmi_wwan' at usb-0000:01:00.0-1.4.2, WWAN/QMI device, 0e:xxxxxxxxx

lsusb

Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 018: ID 1d50:4004 OpenMoko, Inc. sysmoQMOD (Quad Modem)
Bus 001 Device 019: ID 2c7c:0125 Quectel Wireless Solutions Co., Ltd. EC25 LTE modem
Bus 001 Device 017: ID 1d50:4004 OpenMoko, Inc. sysmoQMOD (Quad Modem)
Bus 001 Device 016: ID 1d50:4002 OpenMoko, Inc. quad modem v2
Bus 001 Device 002: ID 2109:3431 VIA Labs, Inc. Hub
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub

systemctl status pcscd

● pcscd.service - PC/SC Smart Card Daemon
     Loaded: loaded (/lib/systemd/system/pcscd.service; indirect; preset: enabled)
     Active: active (running) since Wed 2024-08-21 14:29:51 IST; 14s ago
TriggeredBy: ● pcscd.socket
       Docs: man:pcscd(8)
   Main PID: 2349 (pcscd)
      Tasks: 3 (limit: 3917)
        CPU: 45ms
     CGroup: /system.slice/pcscd.service
             └─2349 /usr/sbin/pcscd --foreground --auto-exit

pcsc_scan -r

No reader found.

LED 601, 602, 701, 702 are red solid
According sysmoqmd manual it means that pcscd should have access to simcard.

Can open /dev/ttyUSB2 serial and connect to the m2, Quectel EC25 modem.

simtrace2-list lists all 4 slots. (Possibly connected to a different USB port at this time)

	1d50:4004 Addr=5, Path=1-1.4.4, Cfg=1, Intf=0, Alt=0: 255/2/0 (CardEmulator Modem 3)
	1d50:4004 Addr=5, Path=1-1.4.4, Cfg=1, Intf=1, Alt=0: 255/2/0 (CardEmulator Modem 4)
	1d50:4004 Addr=5, Path=1-1.4.4, Cfg=2, Intf=0, Alt=0: 255/255/0 (0.8.1.72-3fbe)
	1d50:4004 Addr=4, Path=1-1.4.1, Cfg=1, Intf=0, Alt=0: 255/2/0 (CardEmulator Modem 1)
	1d50:4004 Addr=4, Path=1-1.4.1, Cfg=1, Intf=1, Alt=0: 255/2/0 (CardEmulator Modem 2)
	1d50:4004 Addr=4, Path=1-1.4.1, Cfg=2, Intf=0, Alt=0: 255/255/0 (0.8.1.72-3fbe)

simtrace2-remsim is also not able to access any of the sims.

Any ideas on how to move forward here?

2

I think you are fundamentally misunderstanding the architecture and purpose of the sysmoQMOD. The QMOD is a modem carrier board with built-in cardem functionality.

Your message seems to imply you are expecting it to be a multi-slot card reader. That is what the sysmoOCTSIM is: An 8-slot USB-CCID device, i.e. the exact counterpart of the QMOD.

The product home page, data sheet and block diagram of the QMOD should never mention anything about card-reader / CCID functionality. In fact, the block diagram at the bottom of sysmoQMOD | clearly shows that there is a switch that can connect the modem either to the local sim slot, or to the emulated sim (carem). There is no way to connect the local SIM slot to the microcontroller, and hence no way to implement any card reader functionality.

3

Thank you for your reply.
Yes. Seems I am mistaken. Was hoping to be able to switch to sim and access via pcscd and give control back to modem later.

The intended purpose was to have the sysmoQMOD with modems connected to mobile operator network and on demand, make use of the sim card to perform EAP-SIM/AKA authentication tests via freeradius eapol_test.

So, if I understand correctly, it should still be able to work if we make use of a different card-reader and use as a remote-sim with sysmoQMOD?

4

Yes. If you want to avoid the complexity of osmo-remsim, you can use simtrace2-cardem-pcsc from the simtrace2 git repository. It will allow you to connect any local PC/SC card reader to one of the four cardem instances of the QMOD. You can run it several times for seveal modems in parallel.