Help needed on using hardware tokens / Smart Cards for encryption

I need help in filling the following gap in my understanding
I know about
1. Using keys in Java keystores to encrypt/decrypt data (Signing, symmetric encryption)
2. Using Keytool to export a digital certificate to a keystore.
I need help in knowing
1. How the certificate stored in secret device is shared with java key stores. Do I need to use some special library.
2. Is the process of encrypting Secret Key bytes defferent from wrapping the key?
Specifically, I want to use iKey (USB based security hardware token) in my system, which says that it supports
�� The PKCS#11 standard library
�� The MSCAPI and CSP standard libraries
�� Using automatic certificate registration

> We have a current Server with 4 x 4 cores, 64 GB RAM, 6TB HDD, Windows 2K8 R2 and SQL Server 2K8 R2. On this server we have installed 6 SAP Servers(both ABAP and JAVA based). We want to install two more SAP servers on this machine but planning to use the Hyper-V Mode to ensure that there is no conflict. With this background here are my queries.
You should not run SAP instances on the server with the hypervisor (the OS running on the metal). If you want to virtualize, then do it for all instances.
Read
Note 1246467 - Hyper-V Configuration Guideline
Note 1570141 - Key Figures of Virtualization on Hyper-V
> u2022 Is it possible to take a Image of existing installation (6 SAP Servers and SQL Server) that we have done?
If they are running on the same OS you will always take images of everything.
> I think this was possible in VMWare.
So those 6 servers are virtualized already??
> The issue I foresee is that in this image the servers are using Machine Name as host. In the Hyper V mode the host name will change. So how will this work?
The safest way is to do a homogeneous system copy.
> u2022 Can I run the normal windows mode along with Hyper V. Basically we want to keep our 6 SAP servers running and for the two new servers create two hyper V instances and allocate 2 cores and 4GB RAM each. Is this possible? Or as per Microsoft on the root we should not run any server?
According to
Note 1246467 - Hyper-V Configuration Guideline
this should not be done.
Markus

Similar Messages

The use only smart cards for several hundred users

How can I assign soon as possible,
use only the smart card for
a few hundred users? I also have
a group of people who would like to allow the use of
a login and password, and smart card.
Using GPO to the computer,
will be applied to the station, and I would just like
to the user. I know that
the card user can select
to use a smart card, but
how to do it automatically for a group of people
(several hunderd)?

I would use LDAP query via GUI tools (like AD Administrative Console) or console tools (Active Directory PowerShell module) get target users by using some filter and enable smart card checkboxes. GPO cannot be used to make changes in AD.
My weblog: en-us.sysadmins.lv
PowerShell PKI Module: pspki.codeplex.com
PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
Check out new: SSL Certificate Verifier
Check out new:
PowerShell FCIV tool.

Problem signing certificates from external token (smart card)

I can not sign PDF documents with an external token (smart card) through a card reader of a Cherry keyboard.
The card drivers perfectly detect the card and certificates in it, however when trying to sign a certificate in Adobe and select the location of the certificate click in the option "A device attached to this computer" ... I get an error indicating that no device is connected to the computer appears.
I have tried several different card readers, it seems a problem of drives because the middleware card recognizes all tested certificates readers, however it seems that Adobe is not able to find the card reader. It has happened with several teams. In one team made a clone and deploy it to another machine with the same hardware environment, the firm run properly in the pdf that clone, however on the original computer is not working.
You have any idea what could be the problem? Thank you very much in advance.

If the digital ID's corresponding public-key certificate is not getting added to either the Windows Certificate Store, or Mac Keychain Access when you plug the card into the card reader, then you need to load the PKCS#11 module via the Acrobat UI. The module will be a DLL on Windows or a bundle file on the Mac. The problem is there is no one file name to look for, you would need to consult the hardware's documentation to find the name of the file. Once you know the name you can add the P11 module from the Security Settings dialog and then Acrobat will then see the digital ID(s) loaded on the smart card.
Steve

Using Smart Cards for SSPR

I'm working on ForeFront Identity Manager 2010. I'd like to enable AD users to use Smart Cards to reset their passwords. I watched this video www.youtube.com/watch?v=b4aGLnZHZN4. From this video (minute 2), it's said that we could use smart cards to authenticate
to Self-service Password Reset instead of Q/A gate.
I looked at ForeFront Identity Manager Portal but I couldn't find where to configure to use Smart Cards for this purpose. I only found "SMS authentication gate" and "Question and Answer Gate". Can somebody help me?
Thanks,
Hai

I am still interested in Clients or other Inquiries in this
Subject.

I have always paid for apps with a credit card and now need to use an app store card but I can't get past the point where it keeps wanting my credit card updated. And can't used the app card number. Any advice???

I have always paid for apps with a credit card and now need to use an app store card but I can't get past the point where it keeps wanting my credit card updated. And can't used the app card number. Any advice???

I do NOT like using my credit card if I don't have to, and I went out of my way to go buy an Apple gift card, which I successfully redeemed into my Apple account. However, when I use the Apple "Cards" app, it will not let me use anything other than my credit card. I tried purchasing a card, hopefulling it would come out of my Apple store balance, but no such luck -- it came out of my credit card.
Apple is becoming more like Microsoft every day.

My itunes account is american but I need to use a canadian credit card to top up but only once...how????

I am Canadian but travel between Canada and the US so have a Canadian account AND an American account. the movie I need to download (for a school project for my daughter) is not available through the Canadian iTune store, only the American but I am a whopping four dollers short on that account so I need to use a Canadian credit card to top up but do not want it left on the account. The billing address for the Canadian card is, obviously, a Canadian address..... what do I do????

Click here and ask the iTunes Store staff to zero your account balance.
(114902)

HT2242 I am British, live in Spain, and want to use my UK credit card for my iTunes account and use English, but can't find a way to do this. Can anyone help?

I am British, live in Spain, and want to use my UK credit card for my iTunes account and use English, but can't find a way to do this. Can anyone help?

under usage-i only have the camera roll, photo library and photostream-they don't show the individual albums withing my libraries-if i delete library-i would delete about 12 albums
I don't sync pics but was hoping the albums showed up there. It was a long shot.

Safari can use my CAC (Smart) Card to login to government websites but Firefox cannot.

Safari and even Google Crome can access my CAC Card and login to government websites, however Firefox just doesn't seem to even try. OSX Lion, Apple Macbook Pro, Firefox 5.0.1.

Try:
* [/questions/808161] Trying to use a CAC smart card reader with Mac version of Firefox
* https://militarycac.com/firefox.htm

ICan't ReInstall my computer please help. need to use Mac for school next week

I use my Mac for School and stuff happened.
Long story short.
1) I tried to reset my Mac Book Pro computer and I did.( by pressing option key and go to disk utility and erase tab and erase)
2) then I know I was supposed to go to Reinstall OS X Lion and I did but I quit. (took 10 hrs and plus my internet is bad and couldn't DL the other stuff)
3) I remembered that I had a recovery disk. so I inserted it and I went to the disk utility, dragged the Macintosh HD to the restore tab, destination, and it copied my recovery disk data? to my Machintosh HD and the name of it changed to Mac OS X Base System ( the name of my recovery disk)
4) and I tried to restart, shut down my computer, it sends me to the same Mac OS Utilities. Again.
5) so I went to Reinstall Mac OS Lion, agreed, and the download destination usually should be the Macintosh HD ( for me its Mac OS X Base System right now) but it said it is locked (because I'm dumb) and i can't install it now.
6) i don't know what to do now because this is not my computer that I'm sending this support from. and I can't use my original Mac Book. what should I do?
AND I NEED TO USE THE MAC NEXT WEEK FOR SCHOOL.
more info: MacBook Pro 13 inch Late 2011 ( got it for christmas)
OS 10.7.5 ( recovery disk is 10.7.2)
had no problems for 2 years.
Why is Internet bad? Japan. thats why.
For those who wonder why I wanted to reset/restore my MacBook Pro or, want to hear the long story:
I play League of Legends, Steam, Osu! on my Mac and it took alot of capacity (or space).
And League of Legends has thisthing called "Item sets" that when you save it, it doesnt save it in the client (or app), it saves the "item sets" data in your computer (took alot of capacity/space)
Not just that, and I had iPhoto but when i downloaded iLife to my mac, and after that, it said my iPhoto is damaged and it can't open.
And summer ended, my parents said If I fail my 11th grade, they are going to kick me out so I told them I'm going to reset my Mac to factory settings and get a fresh start, well this happened.

hi there! I got it back to work by buying the USB version of Mac OS X Lion 10.7
and since my internet connections are kinda bad, I'm not able to download and update it to 10.7.5.
but anyways I got it back to work.
All I can say is I suggest you to buy the USB version of Mac OS X Lion 10.7 from amazon or apple store.

Can we use the same credit card for multiple customers???

One of my clients has a requirement where they need to use the same Credit Card number for multiple customers. I have looked into the possibility of using the 'Alternate Payer' functionality but besides that is there any other way SAP can be tweaked to accept the same credit card on multiple customer accounts?
Thanks in advance for any help or guidance you may provide.
SJ

I know SAP throws an error message which is why I was looking for a solution. I do have a work around. By pointing to an 'Alternate Payer' on the Payment Transactions tab on the customer master you can have a credit card on this alternate payer master record and use this payer on several other customers. All these customers will not have any credit card stored on their master records.
Thanks for your response though.

I have been using the same debit card for iTunes forever and now it's saying its declined but it hasn't expired yet

I Have always used the same debit card for iTunes and then the other day I tried to download an app and it said that I needed to update payment methods so I put in all of my details and it said that my card had been declined. I have no idea why and I don't know how to fix this. Please help

Is the address on your iTunes account exactly the same (format and spacing etc) as on your credit card bill : http://support.apple.com/kb/TS1646 ? If it is then you could try what it says at the bottom of that page :
If the issue persists, contact your credit card company and verify that they and any company they use to process credit card authorisations have the correct information on file.
And/or try contacting iTunes support : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page

I need to get a new wifi card for my mac air. do i have to buy this from a apple store? i live fare away from an apple store.

I spilled some red wine on my keyboard and i cannot connect to the internet any more. it says on the internet icon: Wi-fi: no harware installes. so i guess i need to get a new wifi card for my mac air. do i have to buy this from a apple store? i live fare away from an apple store. Also, I do have a macbook with software system:
System Version: Mac OS X 10.6.8 (10K549). can I take out the wifi card from that mack and use that one for my mac air?

Welcome to Apple Support Communities
Consider yourself lucky that your MacBook is still working. Now, turn it off. Wine may have damaged other parts of your computer.
Then, take the MacBook to an Apple Store or reseller. It will be a very expensive repair, as it's not covered by warranty and the logic board has to be replaced. In some cases, it may be better to get a new MacBook.
If you can't take it to an Apple Store, contact with Apple > http://support.apple.com/kb/HE57

Can I use VCC (Virtual Credit Card) For my apple id ?

I want to ask , Can I use VCC (Virtual Credit Card) For my apple id ?

I have just discovered this fact in the past two weeks when I needed to update the expiration date on a virtual credit card number which I have had registered on my iTunes account for years. Apple claims this is a long time policy but considering that I was able to keep using the same VAN for several years by updating the expiration date, I believe the implementation of the policy is recent.
I spoke to two different Apple support people just now and they were apologetic and advised that I leave feedback about the issue at this site:
http://www.apple.com/feedback/itunesapp.html
using the option to leave feedback in the category of managing my iTunes store account.
The support manager told me that the reason for this policy is that it is easy for hackers to steal these virtual numbers and use them--which is ridiculous, because the whole point of the VAN is that it is tied to one vendor only once it is used, and if the vendor changes even one letter in the name when they put through the charge on the credit card account, the charge is refused (at least the way my credit card issuer handles VANs). With any other form of payment, Apple and I would still have a problem with unauthorized charges on the iTunes store and I would have an even bigger problem if the hacker stole my real credit card number and used it anywhere they pleased.
I think this issue should be spread widely on tech sites and anyone who is having this problem should also be sure to leave feedback on the address above as it is supposedly taken very seriously. This is a step backward as far as I am concerned. I love Apple products and will figure out a different way to pay for my various iTunes subscriptions in the meantime but I am certainly not a happy camper right now.

I need an "Open CL compatible graphics card for an early 2008 Mac Pro with 1 gig of V-Ram", any recommendations? Thanks.

I need an "Open CL compatible graphics card for an early 2008 Mac Pro with 1 gig of V-Ram", any recommendations?
Thanks.

BlackList:
Final Cut Pro X, Motion 5, Compressor 4: Graphics card compatibility
WhiteList:
Final Cut Pro X, Motion 5, Compressor 4: Using OpenCL-enabled graphics cards
OpenCL graphics cards available now, for any Mac Pro model, for a reasonable cost:
Apple 5770 US$250 Avail: in stock
Apple 5870 US$450 Avail: 2-3 weeks

Help needed in PS module on CJ9ECP/CJ20N for revaluating CCR??

help needed in PS module on CJ9ECP/CJ20N for revaluating CCR??
How to handle method on_costing_component_to_outtab which belongs to badi gui_itemization_ck. This is to revaluate CCR in CJ20N.
From sale transaction(va01/va02) i need to call cj20n/cj9ecp for revaluating cost estimates. Can anyone say how to proceed with this thing.
Can any one say how to handle pop up window in CJ20N/CJ9ECP when clicked edit ecp button. Later how to revaluate cost estimates. For this should i need to go for call transaction or is there any method available. If so how to handle method for revaluating cost estimates for ECP of WBS elements

Thanks Amol for the advice.
My friend doesn't belong to an engineering background and had not worked in a manufacturing environment.
He holds an MBA degree specialised in systems and has worked in software companies supporting software projects and the functions(like HR,Procurement in the same setup) as a software quality guy.
Moreover the modules mentioned by you requires engineering background with manufacturing exposure.
He had enquired for the course at siemens and they said that he may not be suitable for any of the modules offered by them as per the above reasons.They also mentioned that they have to check with SAP Labs for expert opinion.
Please provide your inputs.
regards,
Zubair.

Help needed on using hardware tokens / Smart Cards for encryption

Similar Messages

Maybe you are looking for