Index

Index

A

ANSI/ISO Format 0, 1

Apache Web Servers

compiling on Linux, 1

configuring, 1

configuring on Linux, 1

creating a certificate, 1

enabling, 1

installing, 1

installing on Linux, 1

starting on Linux, 1

Authentication, 1

C

Card verification key, 1

centralized keystores

configuration, 1

installation, 1

overview, 1

troubleshooting, 1

cert.pem, 1

CKS

overview, 1

troubleshooting, 1

cleartext account number, 1

cleartext PIN, 1

commands

ldapmodify, 1

modinfo, 1

openssl, 1

pkgadd, 1

prtdiag, 1, 2, 3, 4

svcadm, 1

zeroize, 1

credit card processing, 1

cryptographic algorithms

acceleration, 1

enabling optional algorithms, 1

supported, 1

CVK, 1

D

deleting security officers, 1

diagnostic support, 1

diagnostics

determining cryptographic activity, 1

determining cryptographic activity on Linux, 1

disabling crypto traffic, 1

disabling hardware providers, 1

examining kernel statistics, 1

reenable hardware providers, 1

scadiag, 1

diagnostics tests, 1

directories and files, 1, 2

dynamic reconfiguration, 1

E

enabling

Apache Web Servers, 1

entropy, 1

high-quality, 1

low-quality, 1

F

factory state, 1, 2

Failsafe mode, 1, 2

files and directories

installation, 1

financial servces

administering, 1

financial services, 1

administering, 1

administrative commands, 1

components, 1

credit card processing, 1

data types, 1

direct input device, 1

direct key loading, 1

enabling, 1, 2

fs_card_verify, 1

fs_export_key, 1

fs_generate_key, 1, 2

fs_import_key, 1

fs_lib_close, 1, 2

fs_lib_open, 1

fs_pin_translate, 1

fs_pin_verify, 1

fs_retrieve object, 1

fs_session_open, 1

fs_status, 1, 2

fs_translate_key, 1

key management, 1

library initialization, 1

PAN, 1

permitted key forms, 1

personal account number, 1

PIN, 1

PVKI, 1

security officers, 1

setting mode, 1

FIPS 140-2 mode, 1

firmware, 1

H

hardware, 1

hardware and software requirements, 1

hardware zeroize, 1, 2

hexadecimal characters, 1

high availability, 1

high-quality entropy, 1

hot-plug, 1

I

IBM-3624 Method, 1

initializing the board, 1, 2

installation

directories and files, 1, 2

files and directories, 1

software packages, 1

ISO Format 1, 1

ISO-1 PIN-block format, 1

K

KEK, 1

loading, 1

key encryption key, 1

key management functions, 1

key objects, 1

keystore data, 1

keystores, 1, 2

managing with scamgr, 1

L

licenses, 1

Linux

administering for, 1

scadiag, 1

scamgr, 1

load sharing, 1

locking to prevent backups, 1

long-term keys, 1

M

man page descriptions, 1

master file key, 1

MFK, 1

changing, 1

loading, 1

mode, FIPS 140-2, 1

modinfo command, 1

Multi-Admin, 1

commands requiring, 1

managing with scamgr, 1

N

naming requirements, 1

O

online manual pages, 1

fs_card_verify(3), 1

fs_key_generate(3), 1

fs_lib_open(3), 1

fs_pin_verify(3), 1

mca(7d), 1

mcactl(7d), 1

scad(1m), 1

scadiag(1m), 1

scakiod(1m), 1

scamgr(1m), 1

openCryptoki

installing, 1

overview, 1

operating system, 1

optional packages, 1

descriptions, 1

P

packages

optional, 1

required, 1

PAN, 1

password requirements, 1

passwords

scamgr, 1

PEK, 1

PIN, 1

PIN block formats, 1

PIN calculation methods, 1

PIN encryption key, 1

PIN processing functions, 1

PIN verification key, 1

PKCS#11

/usr/lib/64/libpkcs11, 1

application development, 1

board administration, 1

C_DecryptVerifyUpdate, 1

C_GetObjectSize, 1

C_GetOperationState, 1

C_SetOperationState, 1

C_SignEncryptUpdate, 1

CK_EFFECTIVELY_INFINITE, 1

CKM_MD5, 1

CKM_SHA_1, 1

cryptoadm, 1

developing applications, 1

developing applications on Linux, 1

FIPS mode, 1, 2

hardware slot, 1

implementation specifics, 1

keystore slot, 1

libpkcs11, 1

Linux, 1

MD5, 1

METASLOT_OBJECTSTORE_TOKEN, 1

random number generator, 1

secure failover, 1, 2

SHA-1, 1

slot descriptions, 1

software attributes, 1

software error codes, 1

Sun Metaslot, 1

supported functions, 1

token objects, 1

unsupported functions, 1

PKCS#11 interface, 1

pkgadd command, 1

platforms, 1

product features, 1

prtdiag command, 1, 2, 3, 4

PVK, 1

PVKI, 1

PVV, 1

Q

quitting scamgr, 1

R

required packages, 1

S

scadiag

command-line syntax, 1

examples, 1, 2

options, 1

using, 1

utility, 1

scakiod

agent entry, 1

centralized keystore authentication, 1

centralized keystore configuring, 1

cert.pem, 1

certutil, 1, 2

CKS authentication, 1

CKS configuring, 1

client certificate authentication, 1

clientauth, 1

directory server, 1

DS, 1

LDAP, 1, 2

Linux, 1

openssl, 1

options, 1

restarting, 1, 2

service configuration, 1

simple authentication, 1

svcadm, 1

using centralized keystores, 1

using CKS, 1

using SSL, 1

scakscfg

command-line syntax, 1

scamgr

backups, 1

changing passwords, 1

character requirements, 1

command-line syntax, 1

commands, 1

deleting users, 1, 2

diagnostics command, 1

entering commands, 1

file mode, 1

getting help, 1

initializing the board, 1

interactive mode, 1

locking to prevent backups, 1

logging in and out, 1

managing boards, 1

modes of operation, 1

naming requirements, 1

options, 1

password requirements, 1

populating a keystore

with security officers, 1

with users, 1

prompt, 1

quitting, 1

setting auto-logout, 1

user name requirements, 1

using, 1

utility, 1

security officer accounts, 1

security officers, 1

server certificate, 1

slots and tokens, 1

software licenses, 1

software packages, 1

Solaris operating systems, 1

specifications, 1, 2

MMF adapter, 1, 2

connectors, 1

environmental specifications, 1

power requirements, 1

SSL algorithms, 1

Sun Java System Web Servers, 1

autostart on reboot, 1

installing on Linux platforms, 1

starting without interaction, 1

Sun Java System Web Server 6.0

generating a server certificate, 1

installing, 1

installing a server certificate, 1

Sun Java System Web Server 7.0

configuring on Linux platforms, 1

deploying changes, 1

enabling for SSL, 1

generating a server certificate, 1

installing, 1

installing the server certificate, 1

registering the board, 1

starting the web server, 1

starting without interaction, 1

Sun ONE Web Servers

Sun ONE Web Server 6.0

creating a trust database, 1

installing, 1

supported

hardware, 1

operating systems, 1

platforms, 1

software, 1

Solaris operating systems, 1

T

terminal PIN key, 1

TPK, 1

trust database, creating

scamgr, 1

Sun Java System Web Server 6.0, 1

U

user accounts, 1

V

Visa PVV Method, 1

W

web servers, 1

Z

zeroize command, 1

zeroizing the hardware, 1, 2

zone working key, 1

ZWK, 1