[Pki-users] Support a new Hardware token (smart card)

Veale, Sean sean.veale at gdc4s.com
Tue Dec 23 17:38:43 UTC 2008


 

I have a CS system setup on Red Hat Enterprise 4.5 running CS 7.3 (I'm
also going to try this on fedora/dogtag but that is for a another day). 

Using the gemalto smart cards I've succsefully be able to setup the
enterprise security client(ESC) to talk to a token processing
system(tps) which in turn talks to a Certificate Authority (CA), data
recovery module(drm) and Token key system(TKS) to format and enroll
cards. 

Now I want to see if another hardware token can be used and am a little
confused on how to go about doing that. Is sections 8.5 and 9.3 of the
CS admin manual the best information aviable on this subject?  I do have
the Encryption Key(master key I belive in the docs) MAC key and KEK key
for the token but I'm not sure how to go about generating the nessary
key pairs. 

Anyone been able to do this and/or know of more information online?

Thanks 

Sean Veale
Gdc4s
 




More information about the Pki-users mailing list