Search code examples
macosvpne-token

Adding Aladdin eToken certificate to keychain on MacOSX

I Have an Aladdin eToken with certificate on it. On Win Xp there is no any problem of using this certificate with cisco VPN. Now I want to add a certificate to the keychain on my mac. I found the following command:

sc_auth accept [-u user] -h hash

But I have no idea how to get a hash from eToken. Could anybody provide me a solution?

Solution

  • open terminal and type "sc_auth hash" (with connected etoken and red light on). This will list some apple certificates and the certificate from etoken.
    Sample output:
    AA779E7AD6DBB45AFCA48C64F1118E115DFB5604 eToken B6EFD1C9C5DA0D4B70E18B580BD22757D53D79AA apple..

    Take the hash for the etoken from the list(copy&paste) and type the following sudo sc_auth accept -u username –h hash

    To use etoken for authentication register it with the following commands:

    sudo /usr/libexec/PlistBuddy -c "add rights:system.login.console:mechanisms:0 string builtin:smartcard-sniffer,privileged" /etc/authorization

    sudo /usr/libexec/PlistBuddy -c "add rules:authenticate:mechanisms:0 string builtin:smartcard-sniffer,privileged" /etc/authorization