Re: PKCS#11 Module for TPM availiable

2009-07-07 Thread Anders Rundgren
Hi Martin, The naked truth is that provisioning of TPMs is not supported by any generally established protocols or APIs (at least using TPM methods), but this is also a fact for smart cards since there is no way you can policy-define/set PIN-codes using for example Firfox's . I once did a TPM prov

Re: PKCS#11 Module for TPM availiable

2009-07-07 Thread Martin Schneider
Hi Anders and others > PKCS #12 import is probably the most workable way ahead. OK, but how can this be done? If I understood everything correctly, I somehow have to enable the opencryptoki module provided by trousers in Firefox (I didn't succeed in that yet). Later I should be able to use this

Re: PKCS#11 Module for TPM availiable

2009-07-07 Thread Anders Rundgren
When the TPM is enabled and PKCS #11 configured, PKCS #12 import should work directly in Firefox, Unfortunately, I have no knowledge of how you enable a specific TPM since this is a part of an associated software bundle. I have only used Wave Systems stuff which is very different to TroUsers.

Re: CEN TS 15480 (Re: USB device profile for smart-card readers)

2009-07-07 Thread Anders Rundgren
Thanx for this information Jean-Marc! The smart card people are doing what they can to confuse the market. How all these EU standards and national initiatives relate to each other is close to a mystery. A taste of the current soup includes: SCP - Secure Channel Protocol PKCS #15 - Structure us

Re: PKCS#11 Module for TPM availiable

2009-07-07 Thread Arshad Noor
Configuring Firefox with a PKCS#11 library is simple - all you have to do is follow the "Edit->Preferences->Advanced->Security Devices-> Load" path and supply a name (of your choice) for the module and the actual full-path of the PKCS11 library for the prompts. If the P11 library is correctly imp

Re: PKCS#11 Module for TPM availiable

2009-07-07 Thread Subrata Mazumdar
Hi Martin, last December I configured TPM in my Dell D820 to access from Firefox on Linux. I am guessing that you are lloking for info for Linux. For windows, PKCS#11 drivers are typically supplied by the TPM vendor like any another smart card vendor. Initialization of TPM for PKCS#11 support

Re: PKCS#11 Module for TPM availiable

2009-07-07 Thread Nelson B Bolyard
On 2009-07-07 00:33 PDT, Anders Rundgren wrote: > The naked truth is that provisioning of TPMs is not supported by > any generally established protocols or APIs (at least using TPM methods), > but this is also a fact for smart cards since there is no way you > can policy-define/set PIN-codes using

Re: PKCS#11 Module for TPM availiable

2009-07-07 Thread Peter Djalaliev
Hello, I am not trying answer the user's question (I believer previous posts already did), but I would like to straighten out some misconceptions here. I should start by saying that a TPM's functionality is not equivalent to that of other hardware tokens, such as smart cards. A TPM only provides

Re: PKCS#11 Module for TPM availiable

2009-07-07 Thread Nelson B Bolyard
On 2009-07-07 12:50 PDT, Peter Djalaliev wrote: > I should start by saying that a TPM's functionality is not equivalent to > that of other hardware tokens, such as smart cards. A TPM only provides > a subset of the functionality of a regular PKCS#11 token. Some provide more than others. I have

Re: Moving browser PKI forward (Re: Problem reading certificate from hardware token)

2009-07-07 Thread Ian G
On 6/7/09 08:42, Nelson Bolyard wrote: On 2009-07-05 16:03 PDT, Ian G wrote: On 4/7/09 23:19, Nelson B Bolyard wrote: You provide customer support for Firefox? Yup. Doesn't everyone who is a techie? I mean, I don't want to, but because I am a techie, people assume that I know Firefox back to