The vastool utility provides an option to test whether a PKCS#11 library is suitable for use with Safeguard Authentication Services for Smart Cards.
To test the PKCS #11 library
vastool smartcard -l <library> test library
where <library> is the path to the PKCS#11 library you want to test.
For example, to test the Gemalto PKCS#11 drivers on a Red Hat x86 platform, run the following command:
vastool smartcard -l \ /usr/local/lib/libxltCk.so test library
This displays the following output if the driver is correctly installed:
Testing PKCS#11 library '/usr/local/lib/libxltCk.so': Checking PKCS#11 library may be dynamically loaded ... ok Checking PKCS#11 library contains necessary symbols ... ok Checking PKCS#11 function list can be obtained ... ok Checking PKCS#11 library version is compatible ... ok Checking PKCS#11 library can be initialized ... ok Checking PKCS#11 library can be finalized ... ok
To configure the location of the PKCS#11 library using vastool
vastool smartcard configure pkcs11 lib <library>
where <library> is the path to the PKCS#11 library.
For example:
vastool smartcard configure pkcs11 lib /usr/lib/pkcs11/libcoolkeypk11.so
vastool smartcard configure pkcs11 lib /usr/local/lib64/libxltCk.so
vastool smartcard configure pkcs11 lib /usr/local/ActivIdentity/ActivClient/lib/libacpkcs211.so
Note: You can configure the PKCS#11 Library using this procedure or by editing the vas.conf file.
You can manually configure the location of the vendor's PKCS#11 library by editing the setting in the /etc/opt/quest/vas.conf file.
To configure the PKCS#11 library by editing the vas.conf file
[pkcs11] pkcs11-lib = <library>
where <library> is the path to the vendor's PKCS#11 library.
When you install Safeguard Authentication Services for Smart Cards on a 64-bit platform, you install both 64-bit and 32-bit versions of the libraries and Safeguard Authentication Services PAM modules. If you want to use both architectures (for example to allow smart card login using a 32-bit application), you need both 32-bit and 64-bit PKCS#11 libraries.
To install both these libraries, follow the appropriate steps for your platform.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback 利用規約 プライバシー Cookie Preference Center