Sun Oracle Crypto Accelerator 6000 Board, Руководство пользователя

Страница: 79 / 266

Chapter 3 Administering the Sun Crypto Accelerator 6000 Board 57
Note – When not in
scamgr
Interactive mode, the “?” character could be
interpreted by the shell in which you are working. In this case, ensure that you use
the command shell escape character before the question mark. For example in the C
shell, you you must type \?
Managing Keystores With
scamgr
Note – You must log in to
scamgr
as a keystore security officer (KSO) to manage
keystores as described in this section. Device security officers (DSOs) cannot perform
the procedures in this section. For information on KSOs and DSOs, see
“Device and
Keystore Security Officers” on page 34 .
A keystore is a repository for key material. Associated with a keystore are keystore
security officers (KSOs) and users. Keystores not only provide storage, but a means
for key objects to be owned by user accounts. This situation enables keys to be
hidden from applications that do not authenticate as the owner. Keystores have three
components:
■
Key objects – Long-term keys that are stored for applications such as the Sun
Java System Web Server.
■
User accounts – Accounts that provide applications a means to authenticate and
access specific keys.
■
Security officer accounts –
Accounts that provide access to key management
functions through
scamgr
.
Multiple Keystore Support
The
scamgr
utility supports multiple keystores running on a single board. Keystores
must be uniquely named. Each individual keystore contains its own set of security
officers, users, and key objects.