Pin for Sun Software PKCS#11 softtoken

Hello, I am studying the Solaris Security Essential SUN's book for university examination and I have a problem with pktool command in chapter 8. For example when I try to run the follows command:
$pktool list keystore=pkcs11 objtype=both
the command line asks me:
Enter pin for Sun Software PKCS#11 softtoken
end for all chapter exercise is required this pin.
but where i can find this pin?
thanks

Thanks - the only difference is this cert is a self signed one but its nothing fancy just used standard openssl commands to create it, it imports into ikeyman just fine and makes use of 3des which is supported by pktool.
Julian.

Similar Messages

Kssl configuration with Sun Software PKCS#11 softtoken

I need to understand what changed in Solaris 10 10/08 s10s_u6wos_07b SPARC with regard to the crypto framework.
I want to configure kernel SSL proxy (kssl) to use the certificate stored in the PKCS#11 keystore. First, I generated a certificate labelled "mycert" with the pktool command. Next I ran the ksslcfg command as follows:
ksslcfg create -f pkcs11 -C "mycert" -T "Sun Software PKCS#11 softtoken" -x 51000 -p /tmp/pwd 443
The service log indicated :
"no matching PKCS#11 token found"
I had to dig through the kssladm source code in OpenSolaris to find this piece:
http://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/cmd-inet/usr.sbin/kssl/kssladm/kssladm_create.c?&r=898.
The code iterates through the list of tokens, then compares labels with the one provided by the user. Since I specified what the Sun documentation says "Sun Software PKCS#11 softtoken" I would expect it to find it, but it does not. Pktool indicates that the label is present:
% pktool tokens
Token Label Manuf ID Serial No PIN State
Sun Software PKCS#11 softtoken Sun Microsystem user set
I then ran the kssladm manually and specified the -v (verbose) option, so it would print the labels it actually found. It turned out that the only token it finds has a label "Sun Metaslot ".
My question is: is this now the recommended label to be used instead of the "Sun Software PKCS#11 softtoken"? If it is then why does pktool still shows it? Is this a bug in this particular Solaris release? Would appreciate any insight.
Thanks
Leonti

You need to use the trustanchors nssModule, read the JavaTM PKCS#11 Reference Guide at --
http://java.sun.com/javase/6/docs/technotes/guides/security/p11guide.html#Config
For example, you can write your config file like this --
name=NSS
nssSecmodDirectory=path_of_your_dbs
nssLibraryDirectory=path_of_dll_or_so
nssModule=trustanchors

Recommendations for Multipathing software in Sun Cluster 3.2 + Solaris 10

Hi all, I'm in the process of building a 2-node cluster with the following specs:
2 x X4600
Solaris 10 x86
Sun Cluster 3.2
Shared storage provided by a EMC CX380 SAN
My question is this: what multipathing software should I use? The in-built Solaris 10 multipathing software or EMC's powerpath?
Thanks in advance,
Stewart

Hi,
according to http://www.sun.com/software/cluster/osp/emc_clarion_interop.xml you can use both.
So at the end it all boils down to
- cost: Solaris multipathing is free, as it is bundled
- support: Sun can offer better support for the Sun software
You can try to browse this forum to see what others have experienced with Powerpath. From a pure "use as much integrated software as possible" I would go with the Solaris drivers.
Hartmut

How to disable Next Generation Java Plug-in for GPO software deployments?

Is there a way to disable the Next Generation Java Plug-in using a script or batch file for GPO software deployments?
Our group needs to deploy JRE 6 Update 20 to a large number of Oracle Financials users. As part of this deployment, we need to disable the Next Generation Java Plug-in as part of the installation for each desktop. Our plan is to extract the MSI installer package from Sun and create a GPO for software deployment.
It seems you cannot disable the Next Generation Java Plug-in using a simple registry hack or customized MST transform file. Is there another method for disabling Next Generation Java Plug-in?

btenney,
Thanks very much for your suggestion. Can you explain what the parameters are on the ssvagent.exe that you noted -high -jpisetup -old? I can't seem to find any information on the parameters. Also, will this set the configuration just for the user logged on (current user) OR for all users existing and future?
We are having trouble getting next-gen java shut off for all possible users that may logon to a machine in future .. thus looking at putting in bootup login script, but hoping there is a better way to have it take affect at the machine level. Or to at least automate at the user level (existing and future windows users/profiles)

Is Policy Agent2.1 for Sun WebServer6.1 on Windows developed with C?

Environment:
Access Manager,Sun Application Server,Sun Directory Server (all from JES05Q1) on Solaris10
Sun WebServer 6.1, Policy Agent2.1 (SJS_WebServer_6.1_agent_2.1_windows2003) on Windows 2000 Server
I installed all these softwares and configured them successfully.
I can access a sample application(logon.war,which deployed on Application Server) with AM authentication.
Then I deployed logon.war to Sun Web Server on Win2k, but failed to start server.
I reviewed log file ("error") of Web Server 6.1, it said:
================================================================
[06/Apr/2006:18:17:54] info ( 2424): WEB0100: Loading web module in virtual server [https-done.tong.com] at [logon]
[06/Apr/2006:18:17:55] info ( 2424): WEB0100: Loading web module in virtual server [https-done.tong.com] at [search]
[06/Apr/2006:18:18:01] failure ( 2424): WebModule[logon]: WEB2680: Exception starting filter Agent
java.lang.ClassNotFoundException: com.sun.identity.agents.filter.AmAgentFilter
     at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1463)
     at org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1299)
     at org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:260)
     at org.apache.catalina.core.ApplicationFilterConfig.setFilterDef(ApplicationFilterConfig.java:322)
     at org.apache.catalina.core.ApplicationFilterConfig.<init>(ApplicationFilterConfig.java:120)
     at org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:3248)
     at org.apache.catalina.core.StandardContext.start(StandardContext.java:3724)
     at com.iplanet.ias.web.WebModule.start(WebModule.java:238)
     at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
     at org.apache.catalina.core.StandardHost.start(StandardHost.java:652)
     at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
     at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:355)
     at org.apache.catalina.startup.Embedded.start(Embedded.java:995)
     at com.iplanet.ias.web.WebContainer.start(WebContainer.java:411)
     at com.iplanet.ias.web.WebContainer.startInstance(WebContainer.java:506)
     at com.iplanet.ias.server.J2EERunner.confPostInit(J2EERunner.java:161)
[06/Apr/2006:18:18:01] failure ( 2424): WebModule[logon]: WEB2705: Context startup failed due to previous errors
================================================================
It said that Web Server can't find AmAgentFilter class.
So I searched .jar or .class files under directory of Policy Agent 2.1 on Win2k but found nothing.
There is only .dll and .lib files and it looks like that this policy agent is developed with C,not JAVA.
Meanwhile I searched under directory of Policy Agent for Sun Application Server on Solaris10 and found am_agent_filter_2_1.jar which contained "com.sun.identity.agents.filter.AmAgentFilter".
So where can I find a .jar which contains "com.sun.identity.agents.filter.AmAgentFilter" if policy agent 2.1 is developed with C?
Or I misunderstood something from the very beginning?

BTW com.sun.identity.agents.filter.AmAgentFilter is in am_agent_filter_2_1.jar file which is placed in the lib direcotry of the installed agent.
--Amit

Oracle for Sun Solaris (Intel Platform)

I want to know that if oracle for sun solaris 8 (intel platform) is available and anyone has installed it. On OTN only oracle for sun solaris (For SPARC ) is available for download.
if anyone know it for solaris 8 (intel platform) then please tell me where to get it from.
rohit
[email protected]
So that we may better diagnose DOWNLOAD problems, please provide the following information.
- Server name ORACLE 9I DATABASE
- Filename
- Date/Time 5 JULY 2K2
- Browser + Version IE 6
- O/S + Version SUN SOLARIS
- Error Msg

I didn't see anything on the Sun site, but the disk arrived with my Solaris media. I have installed it on one machine (you need to create the "oracle" user id, the "dba" group, and you must set the tunable parameters for shared memory to install the software and example database.)
I tried to install a second machine and the Oracle installer terminates half way through without errors. I'm still working that issue.

Oracle 11g R2 for Sun Solaris???

When will be release the version for Sun Solaris?
Is there any way to check the release date for each Oracle version? (e.g. 10.2, 11.1, etc)
Thanks,
Shum

ashum wrote:
Well if you check at this link http://www.oracle.com/technology/software/products/database/index.html
You will see that 11.1.07 is for Windows ServerActually, you might note that it is for Windows Server *2008*. OS qualifiers are fairly important. Sentences may sort of trail off to noth
What you download from the freely available site,and what is the current version with patches applied is often a different thing.
The freely available 'for learning and prototyping' downloads (from the site you mention) are NOT updated to a new patch level. (If necessary, they may be revised to fix bugs that stop them for being installed, but they keep the same point level.)
If a version of the OS is released after the s/w has been made available, and there are problems installing or using that combination, Oracle MAY decide to fix, apply patch set and and make available the s/w for that specific OS.
And if you are waiting for 11.2 because you don't have Support and can't get 11.1.0.7 patch, then I express concern for your management's approach. Missing CPUs and other patches is not a good idea for production.

Oracle Forms Developer/Services 6i Release 2 for Sun SPARC Solaris

Exist? :
Oracle Forms Developer/Services 6i Release 2 for Sun SPARC Solaris
6i Release 2 ,it's product or patch ?
I want to know then Software Product CD Part number, Part # ????? Release 2 , not Release 1!!

I'm getting the page not found error on trying to download the setup Oracle Forms Developer 6i Release 2 for 95/98/NT/2000/XP from:
http://www.oracle.com/technology/software/products/forms/htdocs/winsoft.html

Looking for a Software like GetRight on sparc 2.6

Hi everyone,
I'm getting in troubles when downloading big files to my Sun SPARC
Station runnig solaris 2.6 .So, I'm looking for a software that can replace GetRight (which is exclusively for windows) to install on my station.
Could anyone indicate me which software must I use on sparc 2.6 instead of GetRight.
Thanks a lot

I don't know if any of these do exactly what you want, but...
http://applevie.ws/2010/02/top-10-calendar-apps-for-mac/
http://mac.appstorm.net/roundups/productivity-roundups/30-of-the-best-calendar-a pps-and-utilities-for-mac/

Is oracle 9i for Sun is free

Hi,
Is oracle 9i for Sun is free, or it is just free
for limited amount of time.
I have heard that actually Oracle product is free,
but only the support is the actual licence.
Thanks.
Sincerely,
Viji

No, as a member of OTN, you may download the software for personal/development use. The actual license for production or commerical use you have to pay for.
Click on the downloads icon, select the software you want then read the license agreement very carefully.

Windows drivers for SUN Quad PCI card

Hi everyone.
With the risk of being flamed, I have a question regarding drivers for a Sun QUAD network card. I belive it is a X1034A card.
The card is also marked with a label saying: *5015406096836* and a barcode. On another label it sais: QFEPCI
Is there any chance in h**l that this card would function under a Windows system?
Best regards,
Johan Christensson

Hello Ben,
I own the IntraServer LSI5464E which appears to be 501-5406-01 (using the DC21153-AC which was on my card manufactured by Intel not DEC).
I was wrong, the 21153 is a PCI-to-PCI Bridge chip by Intel. I thought it's similar to the DEC PCI Fast Ethernet DECchip 21140.
The 4 Ethernet controllers chips are manufactured by/for Sun.
The datasheet for the LSI5464E is still available, while the drivers aren't.
Michael
When will the deficencies/bugs in the Forums software be fixed ?

9iAS for Sun Solaris Intel?

Will 9iAS be available for Sun Solaris Intel?
Thanks,
Shane

Shane,
Due to bandwidth/space limitations, there are no plans at this time to put the Intel Solaris version of 9iAS onto OTN.
That said, the Intel Solaris version of 9i AS will be available through the following channels:
1) Ordering directly from the oracle store at store.oracle.com, or via your local Oracle representative.
2) If you have a previous version of iAS for intel solaris (with a support contract), you could request an upgrade via Oracle Worldwide support, and they will send you the software.
Best Regards,
Harry
null

Need license key for a software I bought

I got the Mundu Radio Plus from the App World. I did not get the license key. I contacted the support for the software and they told they can not generate a license key, that this is done by the App World. Please inform how to get this license key. Thanks,

You shouldn't need a license key if the app was purchased in AppWorld, the license key is part of the "purchase" and should recognize as a paid app.
If you continue to have problems with this, call your mobile provider tech support and have them escalate this issue to RIM level tech support.
1. If any post helps you please click the below the post(s) that helped you.
2. Please resolve your thread by marking the post "Solution?" which solved it for you!
3. Install free BlackBerry Protect today for backups of contacts and data.
4. Guide to Unlocking your BlackBerry & Unlock Codes
Join our BBM Channels (Beta)
BlackBerry Support Forums Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

I need a download for desktop software 4.2 or 4.3

I'm totally frustrated after an hour of hard looking for the software.
Yes I know you don't support it any longer but some of us in the real world still need that version because it links with lotus organizer 6.0 and earlier.
All the google links that I had the time to try all link to the blackberry download site which of course stops at v4.6
It sure would be nice if the bbry software had more backwards compatibility but I digress
Would someone please send me the address where 4.2 or 4.3 can be had?
Thanks!

You've posted your question in the Welcome and Introductions section.
RIM no longer supports Desktop Manager 4.2 or 4.3.
1. If any post helps you please click the below the post(s) that helped you.
2. Please resolve your thread by marking the post "Solution?" which solved it for you!
3. Install free BlackBerry Protect today for backups of contacts and data.
4. Guide to Unlocking your BlackBerry & Unlock Codes
Join our BBM Channels (Beta)
BlackBerry Support Forums Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Java for Instructional software?

Hi,
I wanted to know if Java can be used for instructional software development. The age group targeted is 4-10yrs. By that, I would want rich multimedia content (video, audio and GOOD graphics). I saw the Java showcase - and saw that the graphics there are generated on the fly. What kind of tools will be needed is I have to use Java for this? Is there some kind of API?
Thanks!!

You can start programming Java and do all the things you are talking about with one download. If you go to the J2SE link in the upper left of this page, it will bring you to another page with Information On Specific Versions on the right side. You should probably stick with 1.4.1 because 1.4.2 is beta. You want to download the SDK for your platform.
Now comes the hard part... You have to learn to program Java. There are Tutorials on the left side of the page. You should probably start with The Java Tutorial. Once you get past your first few programs, you might want to get an IDE. Sun Studio is available free. It will help you somewhat with the syntax and libraries. You should also learn how to search this site for info (Advance Search at the top of the page) and look up the API documentation (See APIs on the left of the page)

Pin for Sun Software PKCS#11 softtoken

Similar Messages

Maybe you are looking for