The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
10 views

Corporate PKI - How administrators deal with trusted certficates? [closed]

I am wondering how corporate trusted certificates are imported into local users computer. Are admin using GPO to push certificates autoritities to user windows truststore ?
0
votes
1answer
14 views

What is FireFox's Device Manager used for?

In FireFox, there is a Device Manager (Options->Advanced->Certificates->Security Devices) that allows you to import middle-ware for cryptographic tokens (as far as can tell). Can someone tell me ...
0
votes
0answers
36 views

How to properly install SCR3500 card reader on mac - Mac OS X 10.6.8?

I am trying to login into some secured site and I am required to use SCR3500 card reader. I found and installed some drivers - http://support.identive-group.com/download_scm/download_scm.php?lang=en. ...
0
votes
1answer
74 views

Gemalto Smartcard change Admin Key

We are using Gemalto IDPrime smartcards for Windows Logon. The user can change their PIN number but using the Gemalto Mini-Driver Manager anyone can change the users PIN by logging in with the ...
0
votes
0answers
18 views

Is it possible to combine my S/MIME public signing and encryption certificates into one certificate?

My company provides me with S/MIME certificates, but for some reason choose to issue separate certificates for signing and encrypting. Therefore, when I sign a message, the recipients aren't able to ...
0
votes
0answers
15 views

PKIX Extended Key Usage or Policy for Client Access to Wifi?

Does PKIX have an extended key usage or policy for Wifi access that can be set in a client certificate? Or is it limited to clientAuth or ipsecUser?
0
votes
0answers
2k views

Firefox, “Secure Connection Failed” and client certificate

I have a client certificate for Satrtcom. I'm trying to authenticate to their service, but I'm receiving a "Secure Connection Failed" error with error code ssl_error_handshake_failure_alert: The ...
0
votes
1answer
2k views

openssl pkcs12 keeps removing the PEM passphrase from keystore's entry?

OpenSSL 1.0.1e 11 Feb 2013 Generating a self-signed certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 During the process a PEM passphrase is ...
0
votes
1answer
850 views

Windows certificate manager restore private key somehow

This is may sounds very strange but let me explain a situation: I was using my PKI Private Key installed at Windows Certificate Storage I get token, so I decided to load them to token and delete them ...
2
votes
1answer
80 views

What does renewing a certificate really mean?

Often one hears about "renewing an SSL certificate" or "renewing an X.509 certificate", but I wonder what this actually means. Usually, step #1 of the renewal process is "generate a new CSR". Doesn't ...
2
votes
0answers
67 views

How can I allow a user to connect to my OpenVPN by knowing their public key?

Given the public key of a remote user, I would like to run OpenVPN and allow that user to connect to my network. I only need to be connected to one remote machine at a time. The options outlined in ...
3
votes
2answers
2k views

Need a solution to verifying expired digital signatures

I use digital signatures for signing my invoices (required by law for digital invoicing in my country). The problem is, my local authority issues signing certificates that are only valid for a year ...
1
vote
2answers
740 views

How can I find my machine's Private\Public Key? [closed]

Are they kept in the form of a file? If so, is it accessible for me manually or is it used transparently only whenever there is a PKI handshake (please correct me if I am misusing the terminology)? ...
1
vote
1answer
141 views

PKI Intermediate Certificate Trust

Lets say we have a business owned internal CA. Its certificate is trusted by one of the Trusted Roots that is present in all browsers. With that CA, we issue a bunch of certificates for servers in ...
1
vote
4answers
3k views

CAC not working; Chrome gives “error 107”

One of my employees recently got a CAC card and a USB reader. The reader works fine, and I can see the certificates if I open IE9 and go to Options > Content > Certificates > Personal. When I go to ...
3
votes
2answers
597 views

How can I change the PKI certificate I'm using in Firefox?

I have a dozen or so PKI certificates installed on my computer that I use for testing a web app. They represent the "users" Andy Tester, Billy Tester, Cindy Tester, &c. Fairly frequently, I need ...