Desire is for off the shelf token that has been validated as
interoperable with all components within Dogtag family of systems.
Specifically looking at TPS, TKS and ESC client interoperability with
the token.
David
|-----Original Message-----
|From: Lawrence J Melton [mailto:lawrence.j.melton@ugov.gov]
|Sent: Thursday, August 13, 2009 4:50 PM
|To: Satish Chetty
|Cc: David Partridge; pki-users(a)redhat.com; Chandrasekar Kannan
|Subject: Re: [Pki-users] smartcard purchase
|
|It depends on what you mean by "for use with the DogTag system". If
you
|want tokens for your end users, the Gemalto Cyberflex e-gate 32k token,
|Safenet model 330, and iKey 2000 (USB fob with same chip as the model
330)
|or iKey 2032 (same as the iKey 2000 with 32k memory) work great. I've
|never tried using a token for authenticating to Dogtag, but my
|understanding was if you can a token to work with mozilla, you should
be
|able to get it to work with Dogtag.
|
|Yes, you'll need the middleware and card management software. The end
user
|will need the middleware, and the sysadmins will need both. I didn't
know
|that DogTag included middleware, but then it's been a year since I
|downloaded it.
|
|Larry
|
|----- Original Message -----
|From: "Satish Chetty" <satish(a)suburbia.org.au>
|To: "Chandrasekar Kannan" <ckannan(a)redhat.com>
|Cc: "David Partridge" <dpartridge(a)tangible.net>, pki-users(a)redhat.com
|Sent: Tuesday, August 4, 2009 2:47:01 PM GMT -05:00 US/Canada Eastern
|Subject: Re: [Pki-users] smartcard purchase
|
|Hi Chandra,
|
|
|On 08/04/2009 07:08 AM, Chandrasekar Kannan wrote:
|> ----- "David Partridge"<dpartridge(a)tangible.net> wrote:
|>
|>> It is also my understanding that only specific vendor/model #'s of
|>> smartcards are interoperable with DogTag. Does anyone have list of
|>> vendor/card model #'s that have been tested and function without
|>> customization of install?
|>
|> afaik, these are the ones tested to work..
|>
|> *Gemalto TOP IM FIPS CY2 64K token, both as a smart card and
|GemPCKey USB form factor key
|> *Gemalto Cyberflex e-gate 32K token (Red Hat Enterprise Linux
only)
|> *Safenet 330J Java smart card
|
| I could not find 330j cards. Can the 330m be substituted
instead?
|http://www.safenet-inc.com/products/tokens/products_sc_330m.asp
|
|
|
|Thanks,
|-Satish.
|>
|> Hope that helps.
|>
|>>
|>>
|>>
|>> David M. Partridge
|>>
|>>
|>>
|>>
|>>
|>>
|>>
|>> From: Brown, Chris [mailto:cjbrown@mitre.org]
|>> Sent: Wednesday, July 29, 2009 2:37 PM
|>> To: pki-users(a)redhat.com
|>> Subject: [Pki-users] smartcard purchase
|>>
|>>
|>>
|>> When purchasing smartcards for use with the DogTag system, is it
|>> necessary to purchase the middleware and card mgmt software that
|>> vendors also offer? Since DogTag offers this I would guess not, but
|>> wanted to make sure. Thanks.
|>> _______________________________________________
|>> Pki-users mailing list
|>> Pki-users(a)redhat.com
|>>
https://www.redhat.com/mailman/listinfo/pki-users
|>
|
|_______________________________________________
|Pki-users mailing list
|Pki-users(a)redhat.com
|https://www.redhat.com/mailman/listinfo/pki-users