Red Hat CERTIFICATE SYSTEM ENTERPRISE - SECURITY... Manuale utente

Red Hat Certificate System Enterprise

Security Client Guide

Red Hat Author(s): Red Hat, Inc.

ISBN: N/A

Publication date:

Red Hat Certificate System Enterprise Security Client Guide

1http://www.opencontent.org/openpub

Red Hat Certificate System Enterprise Security Client Guide:

This material may be distributed only subject to the terms and conditions set forth in the Open Publication License, V1.0.

A copy of this license is available at http://www.opencontent.org/openpub1. Any Red Hat trademarks that are

incorporated in the documentation are not subject to the Open Publication License and may only be used or replicated

with the express permission of Red Hat, Inc.

Red Hat Certificate System Enterprise Security Client Guide

1. Introduction ........................................................................................................... 1

1. Features ........................................................................................................ 1

2. Platform Support .................................................................................................... 5

3. Installation ............................................................................................................. 7

1. Installation on Windows .................................................................................. 7

2. Installation on Red Hat Enterprise Linux .........................................................15

3. Installation on Mac OS X ...............................................................................16

4. Using the Enterprise Security Client .......................................................................21

1. Launching Enterprise Security Client ..............................................................21

2. Phone Home ................................................................................................21

3. Windows Cryptographic Service Provider .......................................................24

4. Smart Card Auto Enrollment ..........................................................................25

5. Customizing the Smart Card Enrollment User Interface ...................................30

6. Managing Smart Cards ..................................................................................32

6.1. Formatting the Smart Card ..................................................................33

6.2. Reset Smart Card Password ...............................................................34

6.3. Viewing Certificates ............................................................................34

6.4. Enrolling Smart Cards ........................................................................35

7. Diagnosing Problems ....................................................................................37

5. Using Enterprise Security Client Keys for SSL Client Authentication and S/MIME ......41

1. Using the Certificates on the Token for SSL ....................................................41

2. S/MIME Applications .....................................................................................43

6. Uninstalling Enterprise Security Client ....................................................................45

1. Uninstalling on Windows ................................................................................45

2. Uninstalling on Red Hat Enterprise Linux ........................................................45

3. Uninstalling on Mac OS X ..............................................................................45

A. Enterprise Security Client Configuration .................................................................47

1. Configuration ................................................................................................47

2. Enterprise Security Client Mac TokenD ..........................................................48

2.1. Verifying the TokenD Is Working .........................................................49

3. Enterprise Security Client XUL and Javascript Functionality .............................49

3.1. Quick Javascript UI Guide ...................................................................50

4. Enterprise Security Client File Locations .........................................................50

4.1. Windows ............................................................................................51

4.2. Red Hat Enterprise Linux ....................................................................51

4.3. Mac OS X ..........................................................................................51

Index .......................................................................................................................53

Introduction

The Red Hat Certificate System creates, manages, renews, and deletes certificates and keys

within an organization. There are five subsystems which govern the behavior of the public-key

infrastructure (PKI) of the organization:

• The Certificate Authority (CA), which creates, renews, and revokes certificates.

• The Data Recovery Manager (DRM), which archives and recovers keys.

• The Online Certificate Status Manager, which stores lists of revoked certificates for client

applications to use to check if a certificate is valid.

• The Token Processing System (TPS), which interacts with smart cards to generate and store

keys and certificates for a specific user.

• The Token Key Service (TKS), which generates and stores master keys used by the TPS.

End users can use security tokens, which are also called smart cards, to store user certificates

used for applications such as single sign-on access and client authentication. End users are

issued the tokens containing certificates and keys required for signing, encryption, and other

cryptographic functions. To use the tokens, the TPS must be able to recognize and

communicate with them. The tokens have to be enrolled, the process of formatting tokens with

keys and certificates and adding them to the Certificate System. Enterprise Security Client

provides the user interface for end entities to enroll tokens and to communicate with the TPS.

Enterprise Security Client provides the conduit through which TPS communicates with each

token over a secure HTTP channel (HTTPS).

After a token is enrolled, applications such as Mozilla Firefox and Thunderbird can be

configured to recognize the token and use it for security operations, like client authentication

and S/MIME mail. Enterprise Security Client provides the following capabilities:

• Supports Visa Open Platform-compliant smart cards like Axalto Cyberflex egate 32k tokens.

• Enrolls security tokens so they are recognized by TPS.

• Maintains the security token, such as re-enrolling a token with TPS.

• Provides information about the current status of the token or tokens being managed.

• Supports server-side key generation so that keys can be archived and recovered on a

separate token if a token is lost.

1. Features

• The Phone Home feature defines the token issuer name, TPS server, and TPS end-entities

Chapter 1.

interface URL without requiring any user configuration.

• Enterprise Security Client has diagnostic logging that records common access and events

and records potential errors such as interruptions with the connection between the Enterprise

Security Client and TPS server.

• The Enterprise Security Client user interface incorporates Mozilla XULRunner technology.

XULRunner is a runtime package which hosts standalone applications based on XUL, an

XML markup language with a rich feature set for user interfaces. XUL has the following

advantages over HTML for applications:

• XUL provides a wide UI widget set and greater control over the presentation.

• XUL markup is local to the client machine, so it has a greater privilege level than HTML.

• XUL also uses Javascript as the scripting language for convenient program logic scripting.

• XUL Javascript code can make use of the array of Mozilla functionality by using their

XPCOM technology.

• The Mac Enterprise Security Client ships with a smart card-specific TokenD component which

bridges the gap between Certificate System-supported tokens and the Mac CDSA security

layer, allowing current OS X applications like Apple Mail and Safari to take advantage of the

capabilities of Certificate System tokens:

• The Mac Keychain Access utility can be used to view the certificates and keys on

Certificate System tokens.

• The Apple Mail client can be used to view signed and encrypted emails using Certificate

System tokens.

• The Apple Safari browser can use Certificate System tokens to log onto secure SSL web

sites.

• This version of Enterprise Security Client provides tray icon functionality on all three

platforms, including tool tips for errors and actions such as inserting or removing a smart card.

Figure 1.1. Example Token Tray Icon and Tool Tip

Chapter 1. Introduction

On most operating systems, many programs maintain an icon in the tray or notification area.

These icons can be used to control the operation of the program, usually through context

menus when the icon is right-clicked. In the default Enterprise Security Client configuration,

Enterprise Security Client launches and automatically minimizes to the tray. This tray

functionality behaves differently on the different operating systems:

•Windows. When right-clicked, the tray icon shows a simple menu with options to Manage

Smart Card, which opens the Enterprise Security Client interface, and to Exit Smart Card

Manager, which exits the Enterprise Security Client. The exit option in that menu is the only

want to exist the Enterprise Security Client on Windows; clicking the Xin the top right

corner minimizes Enterprise Security Client to the tray. Double-clicking the tray icon brings

Enterprise Security Client to the front. There are also notification messages, shown as

standard balloon tooltips, on events like inserting or removing a card.

•Linux. The tray icon appears only if the notification area in Gnome has been enabled. The

tray icon options are identical to the Windows options. Clicking the Xin the top left corner

closes the current window and minimizes Enterprise Security Client to the tray.

•Mac. On Mac, the tray is called the dock. Since Enterprise Security Client is based on

Mozilla, right-clicking on the Enterprise Security Client dock icon reveals all the standard

Mozilla Firefox menu options, including options to hide, show, and quit the client. The

Enterprise Security Client also has a menu item called Manage Smart Cards in the dock

menu, which opens the card management UI. The top level application menu has a menu

under Go,Manage Smart Card, which also opens the card management window.

Features

Indice

Altri manuali Red Hat Software

Red Hat

Red Hat NETWORK SATELLITE SERVER 4.1.0 Manuale utente

Red Hat

Red Hat CLUSTER SUITE 4.7 - CLUSTER LVM... Manuale utente

Red Hat

Red Hat NETWORK 4.1.0 - Manuale utente

Red Hat

Red Hat ENTERPRISE VIRTUALIZATION - DATASHEET FOR... Manuale utente

Red Hat

Red Hat ENTERPRISE LINUX 4 - STEP BY STEP GUIDE Manuale utente

Red Hat

Red Hat NETWORK PROXY 5.3.0 - Manuale utente

Red Hat

Red Hat NETWORK 4.0.5 - Manuale utente

Red Hat

Red Hat ENTERPRISE LINUX 5.5 - S 2010 Manuale di istruzioni

Red Hat

Red Hat CLUSTER SUITE FOR ENTERPRISE LINUX 4.5 Guida all'installazione

Red Hat

Red Hat CERTIFICATE SYSTEM 7.2 - AGENT GUIDE Manuale utente

Red Hat

Red Hat LINUX 7.1 - PSERIES Manuale utente

Red Hat

Red Hat DIRECTORY SERVER 8.0 Manuale di istruzioni

Red Hat

Red Hat ENTERPRISE LINUX 5.5 - S 2010 Guida all'installazione

Red Hat

Red Hat CLUSTER SUITE FOR ENTERPRISE LINUX 4.7 Guida all'installazione

Red Hat

Red Hat GNBD WITH GLOBAL FILE SYSTEM IN RHEL 4.5 Manuale di istruzioni

Red Hat

Red Hat LINUX 7.2 - OFFICIAL LINUX CUSTOMIZATION... Manuale utente

Red Hat

Red Hat ENTERPRISE LINUX 4 - DEVELOPER TOOLS GUIDE Manuale utente

Red Hat

Red Hat ENTERPRISE LINUX 6 Manuale utente

Red Hat

Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Manuale utente

Red Hat

Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Manuale

Red Hat

Red Hat ENTERPRISE LINUX 4 - DEVELOPER TOOLS GUIDE Manuale utente

Red Hat

Red Hat NETWORK 3.5 - PROVISIONING Manuale utente

Red Hat

Red Hat ENTERPRISE LINUX 3 - SECURITY GUIDE Manuale utente

Red Hat

Red Hat ENTERPRISE LINUX 4 - FOR X86-ITANIUM AND... Manuale utente

Manuali Software popolari di altre marche

COMPRO

COMPRO COMPROFM Manuale utente

Muratec

Muratec OFFICEBRIDGE ONLINE Manuale utente

Oracle

Oracle Contact Center Anywhere 8.1 Manuale utente

Adobe

Adobe 65007312 - Photoshop Lightroom Manuale

Avaya

Avaya NULL One-X for RIM Blackberry Manuale utente

HP ProLiant BL420c Manuale utente

PS Audio

PS Audio PowerPlay Manuale del proprietario

Brady

Brady LOCKOUT PRO 3.0 Manuale di servizio

Avaya

Avaya Interaction Center Manuale utente

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuale

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuale utente

Oracle

Oracle Application 9i Manuale utente

Acer

Acer RDM Manuale utente

Canon

Canon Vixia HF21 Manuale utente

Canon

Canon ZR950 Manuale utente

Samsung

Samsung Auto Backup Manuale utente

Polycom

Polycom Vortex EF2201 Istruzioni per l'installazione e il funzionamento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuale utente