GemSafe Workstation deals with another dimension of this problem - it wraps Netscape's PKCS11 and IE's CSP functionality and enables the browsers and e-mail applications to store their x.509 certificates on a SmartCard.
Not having the certs ever stored on a hard drive is something of an appealing idea, seeing as it gives you both mobility and an added level of authenticity, since there's only one copy of your private key in existence - and it happens to be protected by hardware encryption on a self-locknig pin-protected card.
Here's the deal, though - GemSafe workstations only runs on Winblows systems at the moment.
A few guys on our team, or elsewhere in the Gemplus Linux group have adapted some of the GemSafe functionality to linux - the pam-with-smartcard smart-login to machines, ssh-from-a-smartcard type stuff, but we've never adapted our own PKCS-11...
What a great idea! I'm bringing it up at this afternoon's meeting, I just wanted to thank you for the idea, and see if anyone else has any additionals input to offer.:)
Monstre.
LinuxChicks of http://www.gemplus.com
gila.sheftel@gemplus.com
I can't seem to access them either. Looks like their servers suck as much as their nefarious schemes.
I don't get why someone would want to *do* something like that.
But then, I don't get why people play the lottery either.
Slashdot Mirror
GemSafe Workstation deals with another dimension of this problem - it wraps Netscape's PKCS11 and IE's CSP functionality and enables the browsers and e-mail applications to store their x.509 certificates on a SmartCard.
Not having the certs ever stored on a hard drive is something of an appealing idea, seeing as it gives you both mobility and an added level of authenticity, since there's only one copy of your private key in existence - and it happens to be protected by hardware encryption on a self-locknig pin-protected card.
Here's the deal, though - GemSafe workstations only runs on Winblows systems at the moment.
A few guys on our team, or elsewhere in the Gemplus Linux group have adapted some of the GemSafe functionality to linux - the pam-with-smartcard smart-login to machines, ssh-from-a-smartcard type stuff, but we've never adapted our own PKCS-11...
What a great idea! I'm bringing it up at this afternoon's meeting, I just wanted to thank you for the idea, and see if anyone else has any additionals input to offer. :)
Monstre.
LinuxChicks of http://www.gemplus.com
gila.sheftel@gemplus.com
I can't seem to access them either. Looks like their servers suck as much as their nefarious schemes. I don't get why someone would want to *do* something like that. But then, I don't get why people play the lottery either.