Dieser Inhalt ist in der von Ihnen ausgewählten Sprache nicht verfügbar.
Chapter 4. Using Smart Cards for Web and Mail Clients
After a smart card is enrolled, the smart card can be used for SSL client authentication and S/MIME email applications. The PKCS #11 module has different names and is located in different directories depending on the operating system.
| Platform | Module Name | Location |
|---|---|---|
| Red Hat Enterprise Linux | onepin-opensc-pkcs11.so | /usr/lib64/ |
4.1. Setting up Browsers to Support SSL for Tokens Link kopierenLink in die Zwischenablage kopiert!
Link kopierenLink in die Zwischenablage kopiert!
To set up the Firefox browser to support SSL for tokens:
- Open the menu and select .If the menu bar is not visible in Firefox, press the Alt key to temporarily display it.
- In the entry, select the tab, and click the button.
- Add the PKCS #11 driver:
- Click the button.
- Enter a module name.
- Click , select the Enterprise Security Client PKCS #11 driver library, and click .
- If the CA is not yet trusted, download and import the CA certificate.
- Open the SSL End Entity page on the CA. For example:
https://server.example.com:9444/ca/ee/ca/
https://server.example.com:9444/ca/ee/ca/Copy to Clipboard Copied! Toggle word wrap Toggle overflow - Click the Retrieval tab, and then click Import CA Certificate Chain.
- Click Download the CA certificate chain in binary form and then click .
- Choose a suitable directory to save the certificate chain, and then click .
- Click , and select the Advanced tab.
- Click the button.
- Click , and import the CA certificate.
- Set the certificate trust relationships.
- Click , and select the Advanced tab.
- Click the button.
- Click , and set the trust for websites.
The certificates can be used for SSL.