[xmlsec] xmlSecMSCryptoKeyDataAdoptCert

[Amiler Scumba]

>Sorry my mistake. Do you really put _certificate_ to hardware token
>leaving private key at disk?

We perform the following steps:
1.
Import the .PFX file on the hardware token.  Both the certificate and 
private key are imported to the token.

2.
Delete the certificate from the local machine. Internet explorer warns you 
the them deleting, you will be unable to decrypt any data encrypted with 
this certificate... The Internet Explorer removes the certiricate from 
CryptoApistore, but leavs the private key on the disk (this is a bug!)

3.
We then re-insert the smart card into machine. And Register certificate with 
the utility provided by the smart card maufacturer. This imports the 
certificate in current user store and set the provider info structure to the 
correct CSP and key container (smart card).

You can repeat step 3 on any other machine you want and you will be able to 
use the smart card and the private key stored on the smart card.

If you perform the step 3 on the machine which was used to generate the 
private key, and you do not use the provider info flag, you will be able to 
use the certificate without inserting the card. It looks like cryptoapi 
tries very hard to find the maching key ;--)

Amiler.

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/