About Phone Home Profiles; Setting Global Phone Home Information - Red Hat CERTIFICATE SYSTEM 8.0 - MANAGING SMART CARDS WITH THE ENTERPRISE SECURITY CLIENT 1-23-2010 Manual

op.format.userKey.issuerinfo.value=http://server.example.com

3.3.1. About Phone Home Profiles

The Enterprise Security Client is based on Mozilla XULRunner. Consequently, each user has a profile
similar to the user profiles used by Mozilla Firefox and Thunderbird. The Enterprise Security Client
accesses the configuration preferences file. When the Enterprise Security Client caches information
for each token, the information is stored in the user's configuration file. The next time the Enterprise
Security Client is launched, it retrieves the information from the configuration file instead of contacting
the server again.

3.3.2. Setting Global Phone Home Information

Phone Home is triggered automatically when a security token is inserted into a machine. The system
immediately attempts to read the Phone Home URL from the token and to contact the TPS server. For
new tokens or for previously formatted tokens, the Phone Home information may not be available to
the card.
The Enterprise Security Client configuration file, esc-prefs.js, has a parameter which allows a
global Phone Home URL default to be set. This parameter is esc.global.phone.home.url and is
not in the file by default.
To define the global Phone Home URL:
1. Remove any existing Enterprise Security Client user profile directory. Profile directories are
created automatically when a smart card is inserted.
• On Red Hat Enterprise Linux, the profile directory is ~/.redhat/esc.
• On Windows, the profile directory is C:/Documents and Settings/user_name/
Application Data/RedHat/ESC.
2. Open the esc-prefs.js file.
• On Red Hat Enterprise Linux 5 (32-bit), the profile directory is /usr/lib/esc-1.1.0/
defaults/preferences. On 64-bit systems, this is /usr/lib64/esc-1.1.0/defaults/
preferences.
• On Windows, the profile directory is C:/Program Files/Red Hat/ESC/defaults/
preferences.
3. Add the global Phone Home parameter line to the esc-prefs.js file. For example:
pref("esc.global.phone.home.url","http://server.example.com:7888/cgi-bin/home/index.cgi");
The URL can reference a machine name, a fully-qualified domain name, or an IPv4 or IPv6
address, depending on the DNS and network configuration.
When a smart card is inserted and Phone Home is launched, the Enterprise Security Client first
checks the token for the Phone Home information. If no information is on the token, then the client
checks the esc-prefs.js file for the esc.global.phone.home.url parameter.
About Phone Home Profiles
17