Question

I Have an Aladdin eToken with certificate on it. On Win Xp there is no any problem of using this certificate with cisco VPN. Now I want to add a certificate to the keychain on my mac. I found the following command:

sc_auth accept [-u user] -h hash

But I have no idea how to get a hash from eToken. Could anybody provide me a solution?

Was it helpful?

Solution

open terminal and type "sc_auth hash" (with connected etoken and red light on). This will list some apple certificates and the certificate from etoken.
Sample output:
AA779E7AD6DBB45AFCA48C64F1118E115DFB5604 eToken B6EFD1C9C5DA0D4B70E18B580BD22757D53D79AA apple..

Take the hash for the etoken from the list(copy&paste) and type the following sudo sc_auth accept -u username –h hash

To use etoken for authentication register it with the following commands:

sudo /usr/libexec/PlistBuddy -c "add rights:system.login.console:mechanisms:0 string builtin:smartcard-sniffer,privileged" /etc/authorization

sudo /usr/libexec/PlistBuddy -c "add rules:authenticate:mechanisms:0 string builtin:smartcard-sniffer,privileged" /etc/authorization

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top