Re: [Pki-devel] (no subject)
Chandra is correct.
As of right now.
ESC can only populate the supported tokens with applets and certificates only
with the assistance of TPS. Also, ESC only recognizes the tokens
that our CoolKey PKCS#11 module recognizes.
----- Original Message -----
From: "Chandrasekar Kannan" <ckannan(a)redhat.com>
To: "David K CTR USA AMC Stutzman" <David.Konrad.Stutzman(a)us.army.mil>
Cc: pki-devel(a)redhat.com
Sent: Thursday, May 21, 2009 7:14:54 AM GMT -08:00 US/Canada Pacific
Subject: Re: [Pki-devel] (no subject)
On Thu, 2009-05-21 at 09:46 -0400, Stutzman, David K CTR USA AMC wrote:
Sorry for the seemingly rhetorical question...
Does the ESC support generation of keys and issuance of certificates
onto anything other than the supported "Global Platform" hardware
tokens (ie software tokens such as NSS's internal cert DB, PKCS#12
files, Java KeyStores, etc)? The way I understand it, the ESC *only*
supports a few types of HW tokens, but I've been asked to get an
official yes or no.
I'll leave the official statement to come from Jack.
But to my knowledge, token management *only* happens via TPS ( no p12,
no cert/key generation directly via software at this point ).
Thanks,
Dave
--
David Stutzman
Fort Monmouth - Myer Center
IA - Tactical Network Protection
david.konrad.stutzman @us.army.mil
D&S Consultants, Inc.
dstutzman @dsci.com
Lab: 732-532-8959
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Chandrasekar Kannan -- ckannan(a)redhat.com
Quality Engineering -- http://www.redhat.com/identity_management/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel