[Fed-Talk] Fully Snow Leopard Compatible ECA Hardware Assurance USB Tokens?
[Fed-Talk] Fully Snow Leopard Compatible ECA Hardware Assurance USB Tokens?
- Subject: [Fed-Talk] Fully Snow Leopard Compatible ECA Hardware Assurance USB Tokens?
- From: Bob Colbert <email@hidden>
- Date: Thu, 10 Jun 2010 10:38:05 -0400
- Acceptlanguage: en-US
- Thread-topic: Fully Snow Leopard Compatible ECA Hardware Assurance USB Tokens?
Title: Fully Snow Leopard Compatible ECA Hardware Assurance USB Tokens?
Can anyone tell me of a fully Snow Leopard compatible FIPS 140-2 USB Token for ECA Hardware Assurance certificates? I recently signed up for an ECA Hardware Assurance USB Token. The token provided by the ECA vendor was an ActivIdentity USB token as shown here - http://www.actividentity.com/products/authenticationdevices/USBTokens/ . This USB token lists itself as a CAC-xxxx-... in Keychain. I am able to unlock it, however the certs do not show up. The certs are present and are viewable/usable under Fusion (XP) with ActivClient 6.1.
I have posted a question on the SmartCardUsers mailing list and also posted a ticket on the OSForge site for SmartCard Services. It has been acknowledged that the tokend needs to be updated to support this USB Token, but I am not sure of the timeframe for the fix to be implemented. The SmartCardServices list, also posts a compatibility matrix and the ActivIdentity USB token is listed as “compatible.” However the internal card reader portion of it is, but the tokend needs to be updated to properly read the profile stored within it. In the interim, I am looking for alternative USB tokens that are FIPS 140-2 compliant and are fully Snow Leopard compatible in Keychain. I have to get users their certificates soon, but I didn’t want to keep providing them a Windows-only USB token solution. Anyone find and currently use an alternative USB Token for ECA-issued certificates in Snow Leopard?
I don’t mind using Fusion and ActivClient for Windows to initialize the tokens and put the certificates on the device, but for daily use, a fully Snow Leopard compatible device would obviously be preferred.
Thanks,
----
Bob Colbert
DE Technologies
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden