Support for non-proprietary secure encrypt&sign format?

Hi,
I want to embed data in my application which I have encrypted and signed using strong cryptography, so that the application can verify the data (assuming the application itself doesn't get changed).
Currently I construct three byte[] arrays:
1.) DESede encrypted data
2.) RSA encrypted DESede key
3.) Signature of unencrypted data using the
Signature signature = Signature.getInstance("SHA1withRSA")
signature.initSign(rsaPrivateKey)
signature.update(unencryptedData)
I turn each of these three byte[]s into Strings using Base64Coder and then concatenate them ":" separated.
While this works (I can decrypt and verify the data), the format in which I represent the encrypted and signed data (Base64 encoding and ":" separation) is not any widely used standard and also doesn't contain any metadata about the encryption algorithm used, as would e.g. a gnupg encrypted block.
So I was wondering, why is there no static method in the JCE that just says
String or byte[] encrypted = SomeClass.encryptAndSign(data, "RSAwithDESede")
or something like that, which then encrypts and signs the data according to some standard format? E.g. such that I could then decrypt and verify the data with PGP/GnuPG/OpenSSL/... ?
Is there any library that does this, and which preferrably provides a simple facade to the complexity of JCE?
Any help is appreciated - thanks in advance!
Tobias

Other standards have addressed this problem. See XML Encryption (http://www.w3.org/Encryption/2001/) and XML Signature (http://www.w3.org/Signature/).
XML Signature is now a standard component of J2SE 6.0 (http://java.sun.com/javase/6/docs/technotes/guides/security/xmldsig/XMLDigitalSignature.html)

Similar Messages

  • Where is Adobe support for non-working software??

    Where is Adobe support for non-working software??
    Thanks,
    Jerry

    Bill,
    Thank you for your reply!
    You may have guessed I am a bit  exassperated. (See this discussion from yesterday.) (Re: How do I get past the Error: 16 problem?
    I am trying to move Adobe Acrobat IX, Photoshop CS6, Photoshop CC and Bridge to a new computer (Mac Pro (late2013), Mavericks 10.9.3) from an older Mac Pro using the same OSX.
    I keep getting the error 16 message whether I try to open Acrobat or Photoshop (I have a paid for DVD of CS6). I have uninstalled and re-installed. I have reset permissions on 2 folders ion the system Library. I have either deactivated or signed out of ALL the Adobe products on my old computer. I signed in as 'Root' and tried to open the software. I have re-downloaded all the products except CS6 which I own. I have restarted the computer. I have repair the drive using Disk Utility and Disc Warrior. In short I have tried everything I can think of and that which has been suggested my others on this Forum.
    Thanks again,
    Jerry

  • Is Weblogic 11g supports for Kerberos AES/RC4 Encryption on Windows 2008 R2

    Is Weblogic 11g supports for Kerberos AES/RC4 Encryption on Windows 2008 R2?
    Thanks,

    DES is disabled by default on 2008, could this DC be a Windows 2003?  If so then this would be the expected encyption.
    The following is the list of the encryption available for each Windows system
    Windows 2000,  XP,Windows Server 2003:     
    DES, RC4          
             Vista
    , Windows Server 2008:      DES, RC4,AES          
             Windows 7 and  Windows Server  2008 R2:     DES(disabled by default), RC4,AES
    From:
    http://blogs.msdn.com/b/openspecification/archive/2010/11/17/encryption-type-selection-in-kerberos-exchanges.aspx
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security, BS CSci
    2012, 2008, Vista, 2003, 2000 (Early Achiever), NT4
    Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
    Please no e-mails, any questions should be posted in the NewsGroup.
    This posting is provided AS IS with no warranties, and confers no rights.

  • Pagination support for non-Oracle databases?

    Hi,
    I just read this thread (Pagination Support on pagination support. Is there any way to get pagination with non-Oracle databases? We are using an IBM iSeries / AS/400 DB2 database right now, and we're planning to use some local lightweight database in the near future as well (probably Cloudscape/Derby or "IBM Everyplace database".)
    We currently use code like this:
    String sql = "SELECT art FROM Artikel art" +
                /* dynamically generated where statement is added here */
                + "ORDER BY art.artikelNummer";
    Query q = em.createQuery(sql);
    q.setFirstResult(firstResult);
    q.setMaxResults(maxResults);If I look in the TopLink logs, I see queries like this:
    SELECT ARTNR, ARALT, ARAFJ, ARXII, ARAVJ, ARXIV, ARANJ, AHGCD, ARNVJ, ARCRJ, ARARK, ARFKJ, ARTNK, ARGP1, ASGCD, ARGP2, ARPR1, ARGP3, ARPR2, AREX1, ARPR3, AREX2, ARPR4, AREX3, ARASA, ARINA, ASSCD, ARIA1, ARBAN, ARIN1, ARBAV, ARIA2, ARBAK, ARIN2, ARCES, ARIA3, ARCDT, ARIN3, ARCRE, ARIA4, ARCWK, ARIN4, ARHBH, ARIA5, ARDFA, ARIN5, ARDFG, ARIA6, ARDOS, ARIN6, AREPW, ARINN, ARFOD, ARIAS, ARFOE, ARINS, ARFOF, ARNAB, ARFOI, ARNIB, ARFON, ARNIA, ARFOS, ARNN1, ARFTA, ARNA2, ARVIV, ARNO2, ARGAP, ARNN3, ARGPT, ARNA4, ARGPD, ARNO4, ARGPA, ARNN5, ARGPO, ARNA6, ARHIS, ARNN6, ARISP, ARNIO, ARKHM, ARNNS, MAGCD, AROVJ, MTGCD, ARPL1, ARMXM, ARPL2, MRKCD, ARPL3, ARMVR, ARVKJ, ARMIM, ARV12, ARMDT, ARVVJ, ARMTE, AR#VR, ARMTU, ARZLS, ARMTM, ARIAT, ARMWK, ARAVS, MPCCD, ARNVS, ARBTW, ARFJS, ARXI2, ARG2S, ARXI3, ARE1S, ARXI4, ARE3S, ARXI6, ARIB1, ARXI1, ARIB2, ARXI5, ARIB3, AROPI, ARIB4, ARPRV, ARIB5, SZGCD, ARIB6, ARSPC, ARINO, ARSMF, ARIOS, VEAAN, ARNIS, ARSYN, ARNO1, ARVR1, ARNA3, ARV1S, ARNN4, ARVR2, ARNO5, ARV2S, ARNIN, ARVR3, ARNOS, ARV3S, ARP1S, ARTFA, ARP3S, ARTFG, ARS12, ARUVC, ARZLD, ARUCW, ARAJS, ARBKV, ARCJS, ARVVI, ARG3S, ARVVP, ARINB, VPOCD, ARIO2, VPECD, ARIO4, ARVIH, ARIO6, ARVHG, ARNBS, ARVRW, ARNN2, ARVPR, ARNA5, ARVVR, ARNAS, ARVVS, ARP2S, ARVV1, ARSVV, ARZK1, ARNJS, ARNA1, ARNO3, ARIO1, ARNO6, ARIO5, AROJS, ARE2S, ARVJS, ARIBS, ARIAD, ARIO3, ARG1S FROM ART WHERE ((((ARUVC = 'N') AND (ARHIS = 'N')) AND (ASGCD = 7)) AND (AHGCD = 15)) ORDER BY ARTNR ASC
    (Yeah, I know we have too much columns in the table...)
    So, no pagination in the query. As you can see, we have a mechanism in place to dynamically generate a where clause. This is because the user can set filters. The problem is, if our user sets a filter that causes the result set to be significantly smaller, the performance is way better than when he sets no filter at all. We suppose this is because the whole result set is sent to TopLink, regardless of the values of firstResult and maxResults.
    We are using TopLink Essentials 2.1-10, by the way.
    Message was edited by:
    Bart Kummel

    Hi all,
    I'm trying to subclass <tt>DatabasePlatform</tt> to add pagination support for the AS/400 DB2 database of my customer. To be fair, it is not going very well so far.
    The first problem is, the query Chris found by googling (Re: Pagination support for non-Oracle databases?), does not work for AS/400s version of DB2. In fact, although it is called "DB2", the database on the AS/400 system is a whole other database than the "normal" DB2 database that runs on Windows and *nix. The AS/400 DB2 simply does not have a "ROW_NEXT" function.
    Another option would be to use the <b>row_number() over()</b> mehtod. But, as can be read here, this function is only available from version V5R4 of OS/400. And guess what? We're stuck on V5R3 at this client. (We cannot upgrade, because there's an application in use that's written in Delphi and IBM dropped the Delphi binding from V5R4...)
    So I pretty much ran out of options. On the mailing list I linked to above, someone mentions the option to make a sort of stored procedure that generates a row count number. An example of how to do this can be found here. I implemented it, and ended up with this code:
    package com.myclientsname.persistence;
    import java.sql.Connection;
    import java.sql.PreparedStatement;
    import java.sql.ResultSet;
    import java.sql.SQLException;
    import org.eclipse.persistence.expressions.ExpressionBuilder;
    import org.eclipse.persistence.internal.databaseaccess.DatabaseCall;
    import org.eclipse.persistence.internal.expressions.ExpressionSQLPrinter;
    import org.eclipse.persistence.internal.expressions.SQLSelectStatement;
    import org.eclipse.persistence.internal.sessions.AbstractSession;
    import org.eclipse.persistence.logging.SessionLog;
    import org.eclipse.persistence.platform.database.DatabasePlatform;
    import org.eclipse.persistence.sessions.SessionProfiler;
    public class AS400Platform extends DatabasePlatform {
        private static final long serialVersionUID = 0L;
        public AS400Platform(){
             super();
             super.setShouldBindAllParameters(false);
        public void printSQLSelectStatement(DatabaseCall call, ExpressionSQLPrinter printer, SQLSelectStatement statement) {
            int max = 0;
            int firstRow = 0;
            if (statement.getQuery()!=null){
                max = statement.getQuery().getMaxRows();
                firstRow = statement.getQuery().getFirstResult();
            if ( !(max>0) && !(firstRow>0) ){
                super.printSQLSelectStatement(call, printer,statement);
                return;
            } else {
                statement.setUseUniqueFieldAliases(true);
                ExpressionBuilder builder = new ExpressionBuilder();
                statement.addField(builder.getField("COUNTER() AS CNTR"));
                printer.printString("SELECT * FROM (");
                call.setFields(statement.printSQL(printer));
                printer.printString(") AS R WHERE R.CNTR >= ");
                printer.printParameter(DatabaseCall.FIRSTRESULT_FIELD);
                if ( max > 0 ){
                    // Use of binding parameters is not allowed here, so use
                    // String concatenation instead...
                    printer.printString(" FETCH FIRST " + max + " ROWS ONLY");
            call.setIgnoreFirstRowMaxResultsSettings(true);
        public boolean wasFailureCommunicationBased(SQLException exception, Connection connection, AbstractSession sessionForProfile){
            if (connection == null || this.pingSQL == null){
                //Without a connection we are  unable to determine what caused the error so return false.
                //The only case where connection will be null should be External Connection Pooling so
                //returning false is ok as there is no connection management requirement
                    //If there is no ping sql then we can not perform the ping.
                return false;
            PreparedStatement statement = null;
            try{
                sessionForProfile.startOperationProfile(SessionProfiler.ConnectionPing);
                if (sessionForProfile.shouldLog(SessionLog.FINE, SessionLog.SQL)) {// Avoid printing if no logging required.
                     sessionForProfile.log(SessionLog.FINE, SessionLog.SQL, getPingSQL(), (Object[])null, null, false);
                statement = connection.prepareStatement(getPingSQL());
                ResultSet result = statement.executeQuery();
                result.close();
                statement.close();
            }catch (SQLException ex){
                try{
                    // Had to add this check because of NullPointerExceptions
                    // (maybe a bug?)
                    if(statement != null){
                        //try to close statement again in case the query or result.close() caused an exception.
                        statement.close();
                } catch (SQLException exception2) {
                    //ignore;
                return true;
            }finally{
                sessionForProfile.endOperationProfile(SessionProfiler.ConnectionPing);
            return false;
    }(As you can see, I had to override the <tt>wasFailureCommunicationBased()</tt> method as well, due to some unexpected NPE's. (A bug, perhaps?))
    This code does work. However, the performance is not very well. The first page comes relatively fast, but as you browse further in the table, each page comes slower. I assume this is because the counter() method has to be evaluated for each row in the table.
    I have to get the performance better and constant. Does anyone have an idea how to optimize this further?
    Best regards,
    Bart Kummel

  • Beryl: support for non power of two textures missing

    Is anyone else seeing Beryl crash X with a message about missing support for non-power-of-two textures, and something about no manageable screens being found?
    Also, I've gotten something about GL_EXT_texture_from_pixmap not being available at least once, when it is definitely available:
    [proteus@chameleon ~]$ glxinfo | grep -i texture_from_pixmap
    libGL warning: 3D driver claims to not support visual 0x46
    GLX_EXT_import_context, GLX_EXT_texture_from_pixmap, GLX_OML_swap_method,
    GLX_SGIX_visual_select_group, GLX_EXT_texture_from_pixmap
    [proteus@chameleon ~]$
    I do wonder if the "3D driver claims to not support visual 0x46" thing has anything to do with this...

    Unichrome here. Neither are powerful hardware but both should should have full support for AIGLX, barring some kind of weird driver bug (which wouldn't be very surprising in view of the EXA bug).
    Is anyone getting this with Intel or ATI hardware?

  • Apple left out support for 802.11i, secure wireless networking WAP2

    We just bought this iMac from Apple in July, and I'm very unhappy that Apple designed the AirPort networking for one generation earlier security with wireless networking.
    The 802.11i standard, which supports very secure WAP2 without the need for a Radius Server (I believe 802.11i refers to this as personal mode) was adopted by the IEEE in 2004.
    Apparently, 2 years isn't enough time for Apple to get the correct chipset into the computer. This system supports the earlier standards only, WAP and WEP. To achieve the newer standard requires a different chipset in the AirPort hardware. Apple supports 802.11i in the stand-alone AirPort gateways, and may support it in the newer Intel Core 2 Duo systems as well. Grumble, grumble, grumble.
    For Apple marketing and customer support folks reading this, I'd appreciate your thoughts and suggestions on fixing this.
    iMac Intel Core Duo 17" Mac OS X (10.4.8)
    iMac Intel Core Duo 17"   Mac OS X (10.4.8)  

    "I can find no indication of an Apple AirPort product that says it is capable of WPA2"
    mrwheels,
    You sound like someone looking for an argument. I'm not sure what the relevance of your statement really is, and I've also never heard of 802.11i. The only standards I've heard of are "b" and "g," not "i." Why don't you fill me in, as I've been using WPA2 since earlier this year? I believe my system automatically updated to it from WPA during one of the software updates, I think it was 10.4.6 in April, as I specifically recall having one iMac that was encrypted with WPA while another had WPA2. There was some sort of temporary issue that occurred with that setup, but, unfortunately, I can't remember what it was, since it lasted such a short time (the few minutes until I installed the update on the second iMac, as I recall).
    Since the update was not a problem for me, the job of reading the update read-me's to determine exactly when it occurred will have to fall to you. In addition, if you look back at these discussion threads during the time from Jan to April, you will see that there were a goodly number of users who were having severe AirPort connection problems with their Core Duo iMacs. I wasn't one of them. They ALL reported having their problems resolved with the installation of the 10.4.6 software update.
    I am using WPA2 on my four 20-inch Core Duo iMacs [purchased at three different times from two different Apple sources] as well as my G4 iBook and other Macs. They have been using WPA2 on both an AirPort Express base station network, and, at a different location, on an AirPort Extreme base station network, both of which are more than two years old. No matter what Apple's printed materials disclose, WPA2 is in fact supported.
    "Apple is selling products that are 2 years behind in supporting a critical wireless security standard"
    Based on what I've stated, and the fact that there are many Discussions members also using WPA2 with their AirPort base stations, that is baloney:))
    Message was edited by: myhighway

  • Problem: Adding support for non-english charachter sets in UCCX 8.0

    We have just moved from windows-based UCCX 7.0 to UCCX 8.0, the upgrade process went successfully so far, but for some reasons, Cisco Agents are experiencing problems displaying non-english charachter sets, everything was working fine prior to upgrading to the new version.
    Is there a way to add support for these character sets?
    Thanks in advance.

    Hi Bala,
    Follow the command. I believe that the space is normal.
    This command can take significantly long time,
    and can also effect the system wide IOWAIT on your system.
    Continue (y/n)?y
    Filesystem            Size  Used Avail Use% Mounted on
    /dev/sda6              90G   46G   41G  54% /common
    8.0K    /var/log/inactive/
    admin:
    admin:
    admin:show diskusage activelog
    This command can take significantly long time,
    and can also effect the system wide IOWAIT on your system.
    Continue (y/n)?y
    Filesystem            Size  Used Avail Use% Mounted on
    /dev/sda6              90G   46G   41G  54% /common
    8.0K    /var/log/active/mgetty
    0       /var/log/active/sa
    4.0K    /var/log/active/platform/snmp/sappagt/sappagt.index
    4.0K    /var/log/active/platform/snmp/sappagt/sappagt.log
    4.0K    /var/log/active/platform/snmp/sappagt/startup.txt
    16K     /var/log/active/platform/snmp/sappagt
    4.0K    /var/log/active/platform/snmp/hostagt/hostagt.index
    Thanks,
    Wilson

  • What is current CommSuite support for non-ASCII passwords?

    Hello all,
    Some of our users managed to change their passwords to non-ASCII strings (via replication from MSAD by ISW) and no longer have access to their communications services.
    While replicating the problem, I have set a (UTF-8 non-ASCII) string as my password in DSEE directly, and *can* log in to Convergence with this password. However, if I change the working password to a non-ASCII string from Convergence itself - it is accepted during the secondary password check, there is no error returned, SOME password is apparently saved into the LDAP directory, but neither of the original non-ASCII plaintext strings can be used for login back into Convergence. Restoration of access is only doable by admin at this point.
    Checking email by IMAP from Thunderbird no longer works with a changed non-ASCII password (including the state when it still works for Convergence).
    Delegated Admin has an explicit check for non-ASCII characters in the password and refuses to set a misbehaving one.
    I see that among the standards supported by CommSuite, there is IMAP4rev1, and RFC 5255 refers to it as the reason that non-ASCII passwords and usernames are for now not supported, though this is expected to be a temporary state of things, and software can prepare for the future by implementing checks for valid UTF-8 strings as well.
    https://wikis.oracle.com/display/CommSuite/Messaging+Server+Supported+Standards
    http://tools.ietf.org/html/rfc5255
    5.1.  Unicode Userids and Passwords
       IMAP4rev1 currently restricts the userid and password fields of the
       LOGIN command to US-ASCII.  The "userid" and "password" fields of the
       IMAP LOGIN command are restricted to US-ASCII only until a future
       standards track RFC states otherwise.  Servers are encouraged to
       validate both fields to make sure they conform to the formal syntax
       of UTF-8 and to reject the LOGIN command if that syntax is violated.
       Servers MAY reject the LOGIN command if either the "userid" or
       "password" field contains an octet with the highest bit set.
       When AUTHENTICATE is used, some servers may support userids and
       passwords in Unicode [RFC3490] since SASL (see [RFC4422]) allows
       that.  However, such userids cannot be used as part of email
       addresses.
    So, the main question at this point is: does or does not all of the CommSuite stack support non-ASCII passwords?
    If no - please confirm, so we can instruct the users to not create problems for themselves (and maybe manage to set up some policy to not accept non-ASCII passwords to MSAD/DSEE in the first place).
    If yes - what should be done to enable support in Convergence/IMAP/SMTP/XMPP/WCAP/WABP/... services - perhaps, setting the LANG/LC_ALL locale environment variables or equivalent JVM flags for UTF-8 in server startup scripts, etc.? (I know that DSEE ldapsearch requires either envvars or a command-line flag for charset encoding of values, so I figure similar quirks may be relevant for some other software)
    Thanks in advance for either response,
    //Jim Klimov

    I can't respond for the suite, but the Messaging Server product should work with UTF-8 usernames and passwords as long as the standard SASL authentication mechanisms that are documented to use UTF-8 are used (e.g. SASL PLAIN). IMAP LOGIN may work fine with UTF-8 as well even though that's non-standard. We do not implement SASLprep, however, so the strings provided by the client to the server must be identical UTF-8 strings for authentication to succeed. If they are provided in a different decomposition, different canonical form or non-standard charset, that's not supported and will fail. We don't test this scenario extensively, so you may encounter bugs (that we'd have to prioritize and fix as with other bugs). Messaging Server recently implemented a restricted option (broken_client_login_charset) for a customer who was stuck with broken clients that sent ISO-8859-1 for the IMAP login command arguments.

  • Post purchase support for non English speaking countries

    I purchased a HP Deskjet Ink advantage 4625 printer in Dec 2013. Installation was unusally hard and I had to get online support for this. Since January I find that the wireless printing option (which is the reason I bought this printer) does not work. So for 2 months have been trying to get support and have failed. In Turkey suport is in Turkish so I can call the customer support number. If I go online to the HP support page and answer I purchased the device in Turkey it takes me to the Turkish page!
    So completely frustrated by the lack of service options, and the continuiing problem on this issue. I need help.

    Greetings in Turkey,
    I have requested help for you.    I have explained the situation as I understand it; hopefully someone will be able to get back to you soon.
    Below are the support pages for your printer as I find them.   If they "stick" in English, then the information may prove useful for you.
    HP Deskjet Ink Advantage 4625 e-All-in-One Printer Drivers
    Click the Kudos Thumbs-Up to say Thank You for the help.
    Although I strive to reflect HP's best practices, I do not work for HP. 
    Kind Regards,
    Dragon-Fur

  • HAL mounts USB flash devices without support for non-latin characters

    Hey folks!
    How can I make HAL mount USB flash devices with support for German characters such as ä, ö, ü, ß, etc? At the moment there's only a silly question mark instead: http://www12.file-upload.net/20.08.08/3cpcpx.png .
    Can anyone help me?
    Thanks.
    Henrik

    I think it's a bug in KDE4, because no other window manager or desktop environment has such problems. I had it as well, when I used KDE4.0.* for testing and seems like this remained. Do you have a completely german KDE4? Check the system settings!
    A thing comes to my mind, did you check it with konqueror? I guess this bug appears in dolphin, richtig? I schätz mal schon Try it with konqueror, if it doesn't appear there, it's a dolphin thing

  • Any updates on email encryption support for non-BES users?

    Hi,
    Given BlackBerry tends towards business users, when can we expect the nearly mandatory feature of encrypted email?? I know it is available with BES, but for the rest of the world who do not have BES, when can expect encryption?
    S/MIME is essential and PGP is nice to have in my case.
    Every other phone on the market can do this, so come on BlackBerry don't force me to sell my lovely Passport. I love it but if you are never going to do encryption it will have to go. I'm a business user and you are forcing me to Android or iOS just for this simple feature.
    Thanks

    Your CIO is asking the wrong question. What about FireWire ports? What about AirDrop? However, if you need to go through the motions of placating him, search for "Removing USB Support Software" in this document:
    http://images.apple.com/support/security/guides/docs/SnowLeopard_Security_Config _v10.6.pdf

  • Support for non-western character sets

    I've been reading docs for WL portal and for WL server, but basically I need to know...what needs to be set/installed for a Weblogic Portal 10.3 running on Weblogic Server 10.3 to have non-western characters display in the content of any portlet we may have? For instance, Arabic, Japanese, Chinese...thanks!
    Sorry, I want to add: this is assuming the encoding of the content is correct (like an html document), the database that content may be retrieved from is set up correctly, etc.
    Just basically what to configure in WL Portal, WL Server, oh and Workshop too (if anything).
    Edited by: user10697594 on Jan 5, 2010 2:56 PM

    Hi
    You dont need anything special, however the JVM you use must support the encoding you want (unless you are going with a unicode flavor like UTF-8 which all JVM's support). The rest of the i18n stuff like ResourceBundles for messages, date currency formats are handled in your code anyway.
    regards
    deepak

  • Support for non US numbering plans

    Hi All,
    I'm wondering if WebOS 1 or 2.0 supports non US telephone numbering plans.
    For example, I'm in a country where we have a different numbering format than the US 7 / 10 digits numbering plan. Our numbers consist of 8 digits and I don't like to see my contact's number in another format.
    Thanks in advance,
    Nick
    Post relates to: Treo 680 (Unlocked GSM)

    These are user-to-user forums. We have nothing to do with Apple or the policies of foreign stores. You can call AppleCare in your region for help.

  • SCCM 2012 with SCM - support for non-Windows?

    Hello all,
    As part of compliance configuration, i came across the Microsoft's Security Compliance Manager 3.0 (latest version) mainly for compliance and remediation. But after going through their docs, I feel SCM is used only on Windows OS (clients or servers). 
    a] Does SCM support contact with non-Microsoft vendors to import security baselines?
    b] Does SCM support audit, compliance and remediation on non-windows OS devices? (clients/servers)
    Any help is greatly appreciated.
    thanks 

    This is the wrong forum to ask Security Compliance Manager based questions, it doesn't have any straight relationship with ConfigMgr. Correct forum is here: http://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement

  • Help with custom page size support for non standard paper

    Firstly, we appreciate any support you may be able to provide, we have already thrown considerable effort at this and it has been very time consuming and frustrating.
    To support a number of business functions need to print to (non standard) continuous and mulitpart paper on a dot matrix printer. The (test) Mac is a 10.4.11 G4 laptop, the printer is an Oki Microline 520 (9 pin 80 column, IBM Proprinter, Microline or Epson FX personalities with a parallel interface) which has been networked via a HP JetDirext Ex Plus print server. That part appears to be operating correctly.
    We have tried a number of drivers / printer personalities with varying levels of success:
    ESP / EPSON 9-Pin Series CUPS v1.1 / Epson FX personality
    ESP / OKIDATA 9-Pin Series CUPS v1.1 / Oki Microline personality
    Ghostscript / epsonc / Epson Dot Matrix Foomatic PPD / Epson FX personality
    Ghostscript / ibmpro / IBM ProPrinterII Foomatic PPD / IBM Proprinter personality
    Ghostscript / okiibm / Oki Microline IBM compatible 9 pin Foomatic PPD / IBM Proprinter personality
    There were no appropriate drivers in Gutenprint (5.2.3 version) The most successful is the okiibm / Oki Microline IBM compatible 9 pin settings, it can print A4 and honors the Printer Features Resolution settings in the print dialogue.
    Q1: Should we see anything in the Printer Info / Installable Option, it is always blank ?
    The issue is custom page sizes, we can manage / add Custom Pages Sizes via the Page Setup / Paper Size interface and they draw on the screen OK but they do not work at the printer (various issue at the printer such error messages, junk printing and wrong orientation):
    Q2: Are we heading in the right direction or is there a better way to handle this ?
    Q3: Would 10.5 solve all our problems, are the print drivers any better ?
    Q4: Is this the correct way to specify custom page sizes, is this all we need to do ?
    Q5: Is so how do we get the driver to respect the size, do we need another filter or something ?
    Q6: Is it possible to add (by hand) custom page sizes to the ESP drivers or Foomatic PPD files so they they appear as a "standard" offering in the Page Setup / Paper Size interface ?
    Sorry for the long / complicated post and thanks in advance for any advice / assistance.

    Matt Broughton wrote:
    Testing on 10.5.7, Tried both Oki 9-Pin Series 1.3 / Microline personality (no joy) and Epson 9-Pin Series 1.3 (this is a much better driver than 1.1) / Epson FX personality but not much joy with custom page sizes,
    The Oki 9-pin Series 1.3 and the Epson 9-Pin Series 1.3 should produce the same results. The only difference in the PPDs is the printer model name.
    After some testing, I find that the output is not the same despite the two PPDs being virtually identical. I did spot in the CUPS source code for the rastertoepson filter that there is some model name matching for Epson printers. Thus I can see where the output using the Oki 9-pin PPD could be different than when using the Epson 9-pin PPD.
    but again once I imbedded the page size into the ppd some (but frustrating) luck. I can get it to respect the paper orientation and it prints well but I could not get the form length to work properly. At best over a print run of 7 labels it would creep up the label by about 0.1 inches / 2 mm.
    Just for the fun of it, I made some additions to the Epson 9-pin 1.3 PPD. All I can say is that I could print a job to file. I have no way to know what it would look like on paper.
    I did find that using a custom paper size did add some unwanted margins to the output bounding box. Putting the custom page size into the PPD seemed to get around that issue.
    I added the following lines to the Epson 9-pin PPD 1.3--
    <pre style="overflow: auto;font-size:small; font-family: Monaco, 'Courier New', Courier, monospace; color: #222; background: #ddd; padding: .3em .8em .3em .8em; font-size: 9px;">*PageSize Label1/Label1: "<</PageSize[288 107.8]/ImagingBBox null>>setpagedevice"
    *PageRegion Label1/Label1: "<<PageSize[288 107.8]/ImagingBBox null>>setpagedevice"
    *ImageableArea Label1/Label1: "0 0 288.00 107.80"
    *PaperDimension Label1/Label1: "288.00 107.80"</pre>
    This adds a paper size with the 4 inch (288pt) width and 1.5 inch (107.8pt) height. That represents the 1.4 inch label and the 0.1 inch gap between labels. I set 0pt margins except for the bottom where is set the 0.1 inch (7pt) gap as the bottom margin.
    The full diff in context is--
    <pre style="overflow: auto;font-size:small; font-family: Monaco, 'Courier New', Courier, monospace; color: #222; background: #ddd; padding: .3em .8em .3em .8em; font-size: 9px;">loki:~ matt$ diff -u /usr/share/cups/model/epson9.ppd ~/Desktop/epson9.ppd
    --- /usr/share/cups/model/epson9.ppd 2009-02-20 20:16:53.000000000 -0600
    +++ /Users/matt/Desktop/epson9.ppd 2009-06-06 20:37:06.000000000 -0500
    @@ -42,6 +42,7 @@
    *PageSize Legal/US Legal: "<</PageSize[612 1008]/ImagingBBox null>>setpagedevice"
    *PageSize A4/A4: "<</PageSize[595 842]/ImagingBBox null>>setpagedevice"
    *PageSize FanFoldUS/US Fanfold: "<</PageSize[1071 792]/ImagingBBox null>>setpagedevice"
    +*PageSize Label1/Label1: "<</PageSize[288 107.8]/ImagingBBox null>>setpagedevice"
    *CloseUI: *PageSize
    *OpenUI *PageRegion/Media Size: PickOne
    *OrderDependency: 10 AnySetup *PageRegion
    @@ -50,17 +51,20 @@
    *PageRegion Legal/US Legal: "<</PageSize[612 1008]/ImagingBBox null>>setpagedevice"
    *PageRegion A4/A4: "<</PageSize[595 842]/ImagingBBox null>>setpagedevice"
    *PageRegion FanFoldUS/US Fanfold: "<</PageSize[1071 792]/ImagingBBox null>>setpagedevice"
    +*PageRegion Label1/Label1: "<<PageSize[288 107.8]/ImagingBBox null>>setpagedevice"
    *CloseUI: *PageRegion
    *DefaultImageableArea: Letter
    *ImageableArea Letter/US Letter: "18.00 18.00 594.00 774.00"
    *ImageableArea Legal/US Legal: "18.00 18.00 594.00 990.00"
    *ImageableArea A4/A4: "18.00 18.00 577.00 824.00"
    *ImageableArea FanFoldUS/US Fanfold: "18.00 18.00 1053.00 774.00"
    +*ImageableArea Label1/Label1: "0 0 288.00 107.80"
    *DefaultPaperDimension: Letter
    *PaperDimension Letter/US Letter: "612.00 792.00"
    *PaperDimension Legal/US Legal: "612.00 1008.00"
    *PaperDimension A4/A4: "595.00 842.00"
    *PaperDimension FanFoldUS/US Fanfold: "1071.00 792.00"
    +*PaperDimension Label1/Label1: "288.00 107.80"
    *MaxMediaWidth: "1080.00"
    *MaxMediaHeight: "86400.00"
    *HWMargins: 18.00 18.00 18.00 18.00</pre>
    I don't know if that will help you or not. Let us know what sort of progress you make.
    Matt

Maybe you are looking for