Red Hat CERTIFICATE SYSTEM ENTERPRISE - SECURITY GUIDE, Руководство пользователя

Страница: 54 / 60

• Windows:
C:\Documents and Settings\$USER\Application Data\RedHat\ESC\Profiles
• Red Hat Enterprise Linux:
~/.redhat/esc
• Mac:
~/Library/Application Support/ESC/Profiles
The
esc-prefs.js
file section below shows the Enterprise Security Client-supported
configuration values.
#################################################################
#The entry below is the XUL chrome page where Enterprise Security
#Client proceeds on startup.
#
pref("toolkit.defaultChromeURI",
"chrome://esc/content/settings.xul");
#The entry below is the URL Enterprise Security Client consults
#for back end TPS functionality.
pref("esc.tps.url","https://test.host.com:7888/nk_service");
#The following three entries are for internal use
pref("signed.applets.codebase_principal_support",true);
pref("capability.principal.codebase.p0.granted",
"UniversalXPConnect");
pref("capability.principal.codebase.p0.id", "file://");
#The entry below sets how many seconds Enterprise Security Client
#should wait while TPS is processing a message
pref("esc.tps.message.timeout","90");
#The entry can be set allow Enterprise Security Client to write
#newly created certificates
#to the local CAPI store after an enrollment operation.
#Also, when a format is done, those same certs will be removed
#from the local CAPI store.
pref("esc.windows.do.capi","yes");
##################################################################
Example A.1. Example Configuration File
2. Enterprise Security Client Mac TokenD
The TokenD software installed on Mac provides a link between the Certificate System CoolKeys
and the Mac CDSA security API, which provides a wide variety of security functionality. For
example, the Apple Mail application can use a KeyChain to perform security-related tasks. A
KeyChain can hold entities such as certificates, passwords, and private and public keys.
Although most KeyChains are stored in software, the CDSA API allows KeyChains to be stored
Appendix A. Enterprise Security Client Configuration
48