[Fed-Talk] CACs with updated certs
[Fed-Talk] CACs with updated certs
- Subject: [Fed-Talk] CACs with updated certs
- From: Walter Adams <email@hidden>
- Date: Thu, 30 Jul 2009 17:17:17 -0400
- Thread-topic: CACs with updated certs
Shawn,
This is an enhancement request. I just dealt (personally) with the problem
of having the certs in my CAC updated to reflect a changed email address.
It took a lot of work - digging through my archive of this list to find the
email in which you describe how to dig under the covers to eliminate the old
certs that OSX believed to still be associated with my CAC. I did not use
the sudo path you described, rather I went though the finder and changed
permissions on the directories until I could see what was on the file system
for my CAC and could have rights to delete the old CAC info. Then I changed
things back.
Honestly there should be an easier way to get the OS to recognize the new
certs on the CAC and to allow you to delete the old ones. There maybe some
cryptographic reason to assume that the file system knows best, but frankly
I think the CAC card should be the canonical source of what it contains, not
the file system.
Walter
Walter Adams
Program Manager & Chief Architect PSNet
email@hidden
703-518-5527 (Office)
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden