[Pki-devel] (no subject)

John Magne jmagne at redhat.com
Thu May 21 16:55:57 UTC 2009


Chandra is correct.

As of right now.

ESC can only populate the supported tokens with applets and certificates only
with the assistance of TPS.  Also, ESC only recognizes the tokens
that our CoolKey PKCS#11 module recognizes. 


----- Original Message -----
From: "Chandrasekar Kannan" <ckannan at redhat.com>
To: "David K CTR USA AMC Stutzman" <David.Konrad.Stutzman at us.army.mil>
Cc: pki-devel at redhat.com
Sent: Thursday, May 21, 2009 7:14:54 AM GMT -08:00 US/Canada Pacific
Subject: Re: [Pki-devel] (no subject)

On Thu, 2009-05-21 at 09:46 -0400, Stutzman, David K CTR USA AMC wrote:
> Sorry for the seemingly rhetorical question...
>  
> Does the ESC support generation of keys and issuance of certificates
> onto anything other than the supported "Global Platform" hardware
> tokens (ie software tokens such as NSS's internal cert DB, PKCS#12
> files, Java KeyStores, etc)?  The way I understand it, the ESC *only*
> supports a few types of HW tokens, but I've been asked to get an
> official yes or no.

I'll leave the official statement to come from Jack. 

But to my knowledge, token management *only* happens via TPS ( no p12,
no cert/key generation directly via software at this point ). 

>  
> Thanks,
> Dave
>  
> -- 
> David Stutzman
> Fort Monmouth - Myer Center
> IA - Tactical Network Protection
> david.konrad.stutzman @us.army.mil
> D&S Consultants, Inc.
> dstutzman @dsci.com
> Lab: 732-532-8959
> _______________________________________________
> Pki-devel mailing list
> Pki-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel
-- 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 Chandrasekar Kannan -- ckannan at redhat.com
 Quality Engineering -- http://www.redhat.com/identity_management/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

_______________________________________________
Pki-devel mailing list
Pki-devel at redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel




More information about the Pki-devel mailing list