Welcome to the VanDyke Software Forums

Join the discussion today!


Go Back   VanDyke Software Forums > General

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 07-23-2013, 01:49 AM
kengaru kengaru is offline
Registered User
 
Join Date: Nov 2011
Posts: 5
SecureCRT and eToken as public key/certificate storage

I wonder if it is possible to use eToken as public key storage for SecureCRT.

In archived forum entries there was some fragments pointing I could use the pkcs11::prov=C:\Windows\System32\eTPKCS11.dll string in Global Options -> SSH2 -> Public Key -> Use identity or certificate file, but there was no other steps to succeed.

Where can I found an step-by-step howto on that topic?

Last edited by rtb; 07-23-2013 at 11:11 AM. Reason: Disable smilies so that PKCS11 path is legible.
Reply With Quote
  #2  
Old 07-23-2013, 08:40 AM
rtb rtb is offline
VanDyke Technical Support
 
Join Date: Aug 2008
Posts: 4,305
Hi kengaru,

Thanks for the question. If you can tell me more about your goal, I think that I can provide information that will be of use.

Are you trying to use publickey authentication to connect to a remote device?

Are you trying to use X.509 authentication?

I am not sure I understand your statement:
Quote:
I wonder if it is possible to use eToken as public key storage for SecureCRT.
Are you wanting to use eToken as an SSH2 agent?
__________________
--Todd

VanDyke Software
Technical Support
support@vandyke.com
505-332-5730
Reply With Quote
  #3  
Old 07-23-2013, 09:38 AM
kengaru kengaru is offline
Registered User
 
Join Date: Nov 2011
Posts: 5
I need to connect to standard SSH 2.0 server (OpenSSH).

I want to use some kind of two-factor auth on client, then key or cert is stored on Alladdin eToken security dongle and all user need to have dongle and password to dongle.

Due to complexity of key or cert isueing and storing to dongle process, the question is an instruction how to do this.
Reply With Quote
  #4  
Old 07-23-2013, 11:57 AM
rtb rtb is offline
VanDyke Technical Support
 
Join Date: Aug 2008
Posts: 4,305
Hi kengaru,

What is the version of SecureCRT are you using, and what platform are you using?

Does your Alladdin eToken device already have a certificate on it?

Does your eToken device have a Microsoft CAPI interface?

If you are using Windows, and your eToken device has a Microsoft CAPI interface, you can use the following steps:
  1. Open the certificate manager (run certmgr.msc)
  2. Make note of the certificates in the Personal store
  3. Plugin the eToken device and provide the password to access it
  4. Refresh the certificate manager (F5) to determine if a new certificate has been added
If your eToken device has a CAPI interface, you can export the .pub file from within SecureCRT by selecting Export Public Key from certificate... from the Tools menu.
__________________
--Todd

VanDyke Software
Technical Support
support@vandyke.com
505-332-5730
Reply With Quote
  #5  
Old 11-02-2015, 05:44 PM
Maureen's Avatar
Maureen Maureen is offline
VanDyke Product Director
 
Join Date: Feb 2004
Location: Albuquerque, NM
Posts: 1,612
The ability to export a public key from PKCS #11 has been added to a pre-beta version of SecureCRT. If you'd like to try it please send email to me at Maureen.Jett@vandyke.com

Maureen
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -6. The time now is 06:03 AM.