Hi,

> my last question is that is the app able to write the certificate on 
> USB-tokens or not?

- I assume you mean USB crypto tokens or Smartcards
- using client side tools it is possible to generate keys and extract CSRs from 
most crypto hardware. These requests are not different from requests for 
software protected keys. OpenXPKI can of course sign those keys and the 
resulting certificates can be installed on the device. Doing this (e. g. 
manually) is out of scope for OpenXPKI.
- token personalization on a larger scale or on behalf of a non-technical user 
requires a Smartcard Management System which is not part of the OpenXPKI code 
on Github
- we have helped one customer to build such a system for their internal Gemalto 
.NET smartcard personalization project, so we know it is very much possible. 
However, this is not a small task.
- it is possible to integrate COTS third party Smartcard Management Systems 
with OpenXPKI

Cheers

Martin



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to