Closed Bug 110183 Opened 18 years ago Closed 4 years ago

Add improvement for face-to-face smart card cert enrollment.

Categories

(Core Graveyard :: Security: UI, enhancement, P5)

1.0 Branch
enhancement

Tracking

(Not tracked)

RESOLVED WONTFIX

People

(Reporter: ssaux, Unassigned)

References

Details

Attachments

(1 file)

When an organization wants to do a face-to-face smart card cert enrollment, it
would help if the browser could be configured to have a prefered token for cert
encrollment. This pref can be set by the admin setting up the machines in the
face-fo-face office.

When the pref is set, and a cert is requested, the keys are generated on the token.
Attached patch proposed patchSplinter Review
Comment on attachment 57867 [details] [diff] [review]
proposed patch

r=javi (I wonder how deployable this would be.	PK11_FindSlotByName checks the
name of the token if inserted.	So the pref will have to be set to the token
name and not the slot name.  Token name may be set by the user which would make
this pref useless.)
Attachment #57867 - Flags: review+
The idea here is that a workstation in a controlled space (say badge city) is
set up using some configuration tools (e.g., MCD) to set the preference to the
smart card reader installed on the workstation.

Users come and get a certs using a smart card on that workstation, and the cert
is issued to the smart card without the need for the SO checking over the user's
shoulder that the users chooses the hardware token rather than the software one.

cc Terry and Bob.  If it's not useful we don't want it, or maybe it needs more
thoughts.
Priority: -- → P3
Target Milestone: --- → 2.2
Blocks: smartcard
Enhancement
Severity: normal → enhancement
Priority: P3 → P5
Target Milestone: 2.2 → Future
Version: 2.1 → 2.4
Mass reassign ssaux bugs to nobody
Assignee: ssaux → nobody
Mass change "Future" target milestone to "--" on bugs that now are assigned to
nobody.  Those targets reflected the prioritization of past PSM management.
Many of these should be marked invalid or wontfix, I think.
Target Milestone: Future → ---
Product: PSM → Core
QA Contact: junruh → ui
Version: psm2.4 → 1.0 Branch
Comment on attachment 57867 [details] [diff] [review]
proposed patch

!NS_FAILED should be NS_SUCCEEDED ....
Attachment #57867 - Flags: review-
Depends on: 1230844
No longer depends on: 1230844
Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → WONTFIX
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.