Enterprise Security Client Mac Tokend - Red Hat CERTIFICATE SYSTEM ENTERPRISE - SECURITY GUIDE Manual

Appendix A. Enterprise Security Client Configuration
• Windows:
C:\Documents and Settings\$USER\Application Data\RedHat\ESC\Profiles
• Red Hat Enterprise Linux:
• Mac:
~/Library/Application Support/ESC/Profiles
The file section below shows the Enterprise Security Client-supported
esc-prefs.js
configuration values.
#################################################################
#The entry below is the XUL chrome page where Enterprise Security
#Client proceeds on startup.
#
pref("toolkit.defaultChromeURI",
"chrome://esc/content/settings.xul");
#The entry below is the URL Enterprise Security Client consults
#for back end TPS functionality.
pref("esc.tps.url","https://test.host.com:7888/nk_service");
#The following three entries are for internal use
pref("signed.applets.codebase_principal_support",true);
pref("capability.principal.codebase.p0.granted",
"UniversalXPConnect");
pref("capability.principal.codebase.p0.id", "file://");
#The entry below sets how many seconds Enterprise Security Client
#should wait while TPS is processing a message
pref("esc.tps.message.timeout","90");
#The entry can be set allow Enterprise Security Client to write
#newly created certificates
#to the local CAPI store after an enrollment operation.
#Also, when a format is done, those same certs will be removed
#from the local CAPI store.
pref("esc.windows.do.capi","yes");
##################################################################
Example A.1. Example Configuration File

2. Enterprise Security Client Mac TokenD

The TokenD software installed on Mac provides a link between the Certificate System CoolKeys
and the Mac CDSA security API, which provides a wide variety of security functionality. For
example, the Apple Mail application can use a KeyChain to perform security-related tasks. A
KeyChain can hold entities such as certificates, passwords, and private and public keys.
Although most KeyChains are stored in software, the CDSA API allows KeyChains to be stored
48
~/.redhat/esc