Name : pki-tks
| |
Version : 10.3.5
| Vendor : Fedora Project
|
Release : 7.fc25
| Date : 2016-10-11 10:01:45
|
Group : System Environment/Daemons
| Source RPM : pki-core-10.3.5-7.fc25.src.rpm
|
Size : 0.24 MB
| |
Packager : Fedora Project
| |
Summary : Certificate System - Token Key Service
|
Description :
The Token Key Service (TKS) is an optional PKI subsystem that manages the master key(s) and the transport key(s) required to generate and distribute keys for hardware tokens. TKS provides the security between tokens and an instance of Token Processing System (TPS), where the security relies upon the relationship between the master key and the token keys. A TPS communicates with a TKS over SSL using client authentication.
TKS helps establish a secure channel (signed and encrypted) between the token and the TPS, provides proof of presence of the security token during enrollment, and supports key changeover when the master key changes on the TKS. Tokens with older keys will get new token keys.
Because of the sensitivity of the data that TKS manages, TKS should be set up behind the firewall with restricted access.
This package is one of the top-level java-based Tomcat PKI subsystems provided by the PKI Core used by the Certificate System.
================================== || ABOUT \"CERTIFICATE SYSTEM\" || ==================================
Certificate System (CS) is an enterprise software system designed to manage enterprise Public Key Infrastructure (PKI) deployments.
PKI Core contains ALL top-level java-based Tomcat PKI components:
* pki-symkey * pki-base * pki-base-python2 (alias for pki-base) * pki-base-python3 * pki-base-java * pki-tools * pki-server * pki-ca * pki-kra * pki-ocsp * pki-tks * pki-tps * pki-javadoc
which comprise the following corresponding PKI subsystems:
* Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS)
Python clients need only install the pki-base package. This package contains the python REST client packages and the client upgrade framework.
Java clients should install the pki-base-java package. This package contains the legacy and REST Java client packages. These clients should also consider installing the pki-tools package, which contain native and Java-based PKI tools and utilities.
Certificate Server instances require the fundamental classes and modules in pki-base and pki-base-java, as well as the utilities in pki-tools. The main server classes are in pki-server, with subsystem specific Java classes and resources in pki-ca, pki-kra, pki-ocsp etc.
Finally, if Certificate System is being deployed as an individual or set of standalone rather than embedded server(s)/service(s), it is strongly recommended (though not explicitly required) to include at least one PKI Theme package:
* dogtag-pki-theme (Dogtag Certificate System deployments) * dogtag-pki-server-theme * redhat-pki-server-theme (Red Hat Certificate System deployments) * redhat-pki-server-theme * customized pki theme (Customized Certificate System deployments) * < customized>-pki-server-theme
NOTE: As a convenience for standalone deployments, top-level meta packages may be provided which bind a particular theme to these certificate server packages.
|
RPM found in directory: /vol/rzm3/linux-fedora-buffet/alt/releases/25/Cloud/i386/os/Packages/p |