[35968] in Kerberos

home help back first fref pref prev next nref lref last post

kinit using smartcard or tpm cert for pkinit

daemon@ATHENA.MIT.EDU (Huang, Peter (HP-IT Palo Alto))
Tue Apr 1 08:53:15 2014

From: "Huang, Peter (HP-IT Palo Alto)" <peter.huang@hp.com>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Date: Tue, 1 Apr 2014 12:51:58 +0000
Message-ID: <5DB7FD2B6375E1458DB65D657D56D0084AC19EB1@G9W0748.americas.hpqcorp.net>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Have anyone done testing pkinit pre-auth using cert on smartcard (may be thru openssl pkcs11) or TPM?   The current instructions only detail cert on the file system but not on smartcard or tpm.    It would be nice that kinit will have a switch that access the private key on the secure devices complete the pre-auth sequence.

-peter huang
Hewlett-Packard Company
3000 Hanover Street
Palo Alto, CA 94304
Tel (650)236-3590

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post