
Overview of the Enterprise Security
Client
The Enterprise Security Client is a tool for Red Hat Certificate System which simplifies
managing smart cards. End users can use security tokens (smart cards) to store user
certificates used for applications such as single sign-on access and client authentication. End
users are issued the tokens containing certificates and keys required for signing, encryption,
and other cryptographic functions.
The Enterprise Security Client is the third part of Certificate System's complete token
management system. Two subsystems — the Token Key Service (TKS) and Token Processing
System (TPS) — are required to process token-related operations; optionally, the Data
Recovery Manager (DRM) can be used with the token management system for server-side key
generation and key archival and recovery. The Enterprise Security Client is the interface
which allows the smart card and user to access the token management system.
After a token is enrolled, applications such as Mozilla Firefox and Thunderbird can be
configured to recognize the token and use it for security operations, like client authentication
and S/MIME mail. Enterprise Security Client provides the following capabilities:
• Supports Global Platform-compliant smart cards like Gemalto Cyberflex Access e-gate 32K
and Cyberflex Access 64K V2 Standard tokens.
• Enrolls security tokens so they are recognized by TPS.
• Maintains the security token, such as re-enrolling a token with TPS.
• Provides information about the current status of the token or tokens being managed.
• Supports server-side key generation so that keys can be archived and recovered on a
separate token if a token is lost.
1. About Smart Card Management
Certificate System creates, manages, renews, and revokes certificates, as well as archiving and
recovering keys. For organizations which use smart cards, the Certificate System has a token
management system — a collection of subsystems with established relationships — to generate
keys and requests and receive certificates to be used for smart cards. These relationships are
show in Figure 1.1, “How Certificate System Manages Smart Cards”.
Four Certificate System subsystems are involved with managing tokens:
• The Token Processing System (TPS) interacts with smart cards to help them generate and
store keys and certificates for a specific entity, such as a user or device. Smart card
operations go through the TPS and are forwarded to the appropriate subsystem for action,
Chapter 1.
1
Hey, Are you tired of missing out on potential profits in the volatile world of cryptocurrency trading? Look no further! I've got something special for you. Introducing the "GOD Trading Strategies" e-book, your ultimate guide to mastering successful crypto trading. For a limited time, you can get this comprehensive guide for just $19.95 instead of the regular $49. That's a whopping 60% discount! Here's what you get with "GOD Trading Strategies": In-depth insights into successf