It depends on what you mean by "for use with the DogTag system". If you want tokens for your end users, the Gemalto Cyberflex e-gate 32k token, Safenet model 330, and iKey 2000 (USB fob with same chip as the model 330) or iKey 2032 (same as the iKey 2000 with 32k memory) work great. I've never tried using a token for authenticating to Dogtag, but my understanding was if you can a token to work with mozilla, you should be able to get it to work with Dogtag. Yes, you'll need the middleware and card management software. The end user will need the middleware, and the sysadmins will need both. I didn't know that DogTag included middleware, but then it's been a year since I downloaded it. Larry ----- Original Message ----- From: "Satish Chetty" <satish@suburbia.org.au> To: "Chandrasekar Kannan" <ckannan@redhat.com> Cc: "David Partridge" <dpartridge@tangible.net>, pki-users@redhat.com Sent: Tuesday, August 4, 2009 2:47:01 PM GMT -05:00 US/Canada Eastern Subject: Re: [Pki-users] smartcard purchase Hi Chandra, On 08/04/2009 07:08 AM, Chandrasekar Kannan wrote:
----- "David Partridge"<dpartridge@tangible.net> wrote:
It is also my understanding that only specific vendor/model #’s of smartcards are interoperable with DogTag. Does anyone have list of vendor/card model #’s that have been tested and function without customization of install?
afaik, these are the ones tested to work..
*Gemalto TOP IM FIPS CY2 64K token, both as a smart card and GemPCKey USB form factor key *Gemalto Cyberflex e-gate 32K token (Red Hat Enterprise Linux only) *Safenet 330J Java smart card
I could not find 330j cards. Can the 330m be substituted instead? http://www.safenet-inc.com/products/tokens/products_sc_330m.asp Thanks, -Satish.
Hope that helps.
David M. Partridge
From: Brown, Chris [mailto:cjbrown@mitre.org] Sent: Wednesday, July 29, 2009 2:37 PM To: pki-users@redhat.com Subject: [Pki-users] smartcard purchase
When purchasing smartcards for use with the DogTag system, is it necessary to purchase the middleware and card mgmt software that vendors also offer? Since DogTag offers this I would guess not, but wanted to make sure. Thanks. _______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
Desire is for off the shelf token that has been validated as interoperable with all components within Dogtag family of systems. Specifically looking at TPS, TKS and ESC client interoperability with the token. David |-----Original Message----- |From: Lawrence J Melton [mailto:lawrence.j.melton@ugov.gov] |Sent: Thursday, August 13, 2009 4:50 PM |To: Satish Chetty |Cc: David Partridge; pki-users@redhat.com; Chandrasekar Kannan |Subject: Re: [Pki-users] smartcard purchase | |It depends on what you mean by "for use with the DogTag system". If you |want tokens for your end users, the Gemalto Cyberflex e-gate 32k token, |Safenet model 330, and iKey 2000 (USB fob with same chip as the model 330) |or iKey 2032 (same as the iKey 2000 with 32k memory) work great. I've |never tried using a token for authenticating to Dogtag, but my |understanding was if you can a token to work with mozilla, you should be |able to get it to work with Dogtag. | |Yes, you'll need the middleware and card management software. The end user |will need the middleware, and the sysadmins will need both. I didn't know |that DogTag included middleware, but then it's been a year since I |downloaded it. | |Larry | |----- Original Message ----- |From: "Satish Chetty" <satish@suburbia.org.au> |To: "Chandrasekar Kannan" <ckannan@redhat.com> |Cc: "David Partridge" <dpartridge@tangible.net>, pki-users@redhat.com |Sent: Tuesday, August 4, 2009 2:47:01 PM GMT -05:00 US/Canada Eastern |Subject: Re: [Pki-users] smartcard purchase | |Hi Chandra, | | |On 08/04/2009 07:08 AM, Chandrasekar Kannan wrote: |> ----- "David Partridge"<dpartridge@tangible.net> wrote: |> |>> It is also my understanding that only specific vendor/model #'s of |>> smartcards are interoperable with DogTag. Does anyone have list of |>> vendor/card model #'s that have been tested and function without |>> customization of install? |> |> afaik, these are the ones tested to work.. |> |> *Gemalto TOP IM FIPS CY2 64K token, both as a smart card and |GemPCKey USB form factor key |> *Gemalto Cyberflex e-gate 32K token (Red Hat Enterprise Linux only) |> *Safenet 330J Java smart card | | I could not find 330j cards. Can the 330m be substituted instead? |http://www.safenet-inc.com/products/tokens/products_sc_330m.asp | | | |Thanks, |-Satish. |> |> Hope that helps. |> |>> |>> |>> |>> David M. Partridge |>> |>> |>> |>> |>> |>> |>> |>> From: Brown, Chris [mailto:cjbrown@mitre.org] |>> Sent: Wednesday, July 29, 2009 2:37 PM |>> To: pki-users@redhat.com |>> Subject: [Pki-users] smartcard purchase |>> |>> |>> |>> When purchasing smartcards for use with the DogTag system, is it |>> necessary to purchase the middleware and card mgmt software that |>> vendors also offer? Since DogTag offers this I would guess not, but |>> wanted to make sure. Thanks. |>> _______________________________________________ |>> Pki-users mailing list |>> Pki-users@redhat.com |>> https://www.redhat.com/mailman/listinfo/pki-users |> | |_______________________________________________ |Pki-users mailing list |Pki-users@redhat.com |https://www.redhat.com/mailman/listinfo/pki-users
participants (2)
-
David Partridge -
Lawrence J Melton