Bug 697085

Summary:	coolkey does not allow for alternate token
Product:	Red Hat Enterprise Linux 6	Reporter:	kent lamb <klamb>
Component:	coolkey	Assignee:	Bob Relyea <rrelyea>
Status:	CLOSED NOTABUG	QA Contact:	Chandrasekar Kannan <ckannan>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.2	CC:	benl
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Windows
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-05-09 20:16:12 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description kent lamb 2011-04-15 19:14:57 UTC

Description of problem:

From a windows box, with coolkey installed and an unformatted card slotted (SC650 used in this case), go to:
https://tms-ca-ee-1.c3pki.nit.disa.mil/ca/ee/ca/ 

and attempt to request a "NSS Mobile Code Certificate Enrollment" form.

select coolkey from the pulldown.  Cooley propmpts for a PIN.  since we are using an un-enrolled card, no pin exists.

Version-Release number of selected component (if applicable):
reporduceable on win xp and 7. using coolkey form esc 1.0.9

How reproducible:

every time

Steps to Reproduce:
1. https://tms-ca-ee-1.c3pki.nit.disa.mil/ca/ee/ca/ 
2. 'NSS Mobile Code Certificate Enrollment'
3. choose coolkey
  
Actual results:

prompt for pin on an un-enrolled card

Expected results:

no pin prompt

Additional info:

Comment 3 RHEL Program Management 2011-04-16 06:01:02 UTC

Since RHEL 6.1 External Beta has begun, and this bug remains
unresolved, it has been rejected as it is not proposed as
exception or blocker.

Red Hat invites you to ask your support representative to
propose this request, if appropriate and relevant, in the
next release of Red Hat Enterprise Linux.

Comment 5 kent lamb 2011-05-09 17:47:02 UTC

Some correction on entry 1:

The card is formatted but unenrolled.  It is formatted against CS8 via ESC on a Windows box.  The url s then accessed via Internet Explorer

Comment 6 Bob Relyea 2011-05-09 18:48:03 UTC

Oh, Windows on Internet Explorer. This may be a problem with the CSP driver. IE
does not open coolkey pkcs11 directly.

We probably should change the product. It's not a RHEL 6 issue at all.