Hardtokenprofiles

Hard Token Profiles

Types of Hard Token Profiles

There exists thee types of hard token profiles:

  • Swedish EID, is a profile with two certificates, one for authentication and one for digital signature. Each certificate have their own key protected by a separate PIN.
  • Enhanced EID, a profile with three certificates, one for authentication, one for signature and one for encryption. In this profile there exists three keys but only two PINs where the authentication key and encryption key share the basic PIN and the signing certificate is lokked by a non-repudation PIN. The Enhanced profile have an option to have the encryption certificate key recoverable.
  • Turkish Profile, a profile with two certiifcates and keys (authentication and signature) protected by one shared basic PIN.

SVG Substitution Variables

Here follows a reference table of all available substitution variables that currently can be used in the SVG templates.

Before you upload the SVG image it's a good idea to test it with
the tool 'svgprinttest' with the following command:

binejbca.sh template print <template filename> <printer name>

Dynamic data is configured in the file:
src/cli/svgtemplateprinttester.properties

Variable Comment
$USERNAME Username of end entity
$CN Commen Name
$SN Serial Number in DN
$GIVENNAME Given Name
$INITIALS Initials
$SURNAME Surname
$O Organisation
$OU Organisation Unit
$LOCATION Location
$TITLE Title
$STARTDATE Start of Visual Validity
$ENDDATE End of Visual Validity
$HARDTOKENSN Hard Token Serial Number
$HARDTOKENSNWITHOUTPREFIX Hard Token Serial Number with out organizational prefix
$PIN1 Signature PIN
$PIN2 Basic PIN (Authentication/Encryption)
$PUK1 Signature PUK
$PUK2 Basic PUK (Authentication/Encryption)
page_revision: 0, last_edited: 1206017821|%e %b %Y, %H:%M %Z (%O ago)
Unless stated otherwise Content of this page is licensed under Creative Commons Attribution-ShareAlike 3.0 License