Ade, Thanks for the writeup. Overall, I think the design (including the JSS change proposal) looks plausible. Just a couple quick comment/question: 1. You seemed to be saying that but I can't be sure as I'm not familiar with the REST interface : the two methods createSharedSecret and deleteSharedSecret are not exposed to entities other than the TKS instance itself (TKS admin). I agree with that if that's what you said. TPS should only have access to the getSharedSecret method, provided with proper SSL client (TPS subsystem) cert. 2. Can tokstool still be used if one chooses to? If so, maybe an extra wizard panel option on TPS to select that. Christina thanks, Christina On 08/30/2013 02:33 PM, Ade Lee wrote: