Communicator Help: Using AOL<sup><font size=-2>®</font></sup> Communicator Identity Manager

Contents | Index | Tutorial Movies

Using AOL Communicator Identity Manager

Managing Smart Cards and Other Security Devices

A smart card is a small device, typically about the size of a credit card, that contains a microprocessor and is capable of storing information about your identity (such as your private keys and certificates) and performing cryptographic operations.

To use a smart card, you typically need to have a smart card reader (a piece of hardware) attached to your computer, as well as software on your computer that controls the reader.

A smart card is just one kind of security device. A security device (sometimes called a token) is a hardware or software device that provides cryptographic services and stores information about your identity.

You use the Security Devices window to work with smart cards and other security devices. To open the Security Devices window from Identity Manager, open the Edit menu and choose Security Devices.

About Security Devices and Modules
Loading Security Modules
Enabling FIPS Mode
Security Devices

About Security Devices and Modules

The Security Devices window lists the available security devices. You can use this window to manage any security devices, including smart cards, that support the Public Key Cryptography Standard (PKCS) #11.

A PKCS #11 module (sometimes called a security module) controls one or more security devices in much the same way that a software driver controls an external device such as a printer or modem. If you are installing a smart card, you must install the PKCS #11 module for the smart card on your computer as well as connecting the smart card reader.

By default, Identity Manager controls two internal PKCS #11 modules that manage three security devices:

- Netscape Internal PKCS #11 Module: Controls two security devices:

- Generic Crypto Services: A special security device that performs all cryptographic operations required by the Netscape Internal PKCS #11 Module.
- Software Security Device: Stores your certificates and keys that aren't stored on external security devices, including any CA certificates that you may have installed in addition to those that come with AOL Communicator.

- Builtin Roots Module: Controls a special security device called the Builtin Object Token. This security device stores the default CA certificates that come with AOL Communicator.

You use the Security Devices window to work with smart cards and other security devices. To open the Security Devices window from Identity Manager, open the Edit menu and choose Security Devices.

<< back to top

Loading Security Modules

If you want to use a smart card or other external security device, you must first install the module software on your computer and, if necessary, connect any associated hardware. Follow the instructions that come with the hardware.

After a new module is installed on your computer, follow these steps to load its software:

1. From Identity Manager, open the Edit menu and choose Security Devices.
2. Click Load.
3. In the Load Device dialog box, enter the following:

- Device Name: The name you want the Security Devices window to display for this device.
- Device File: The complete pathname to the name of the file. For example:
  C:\software\new_module_file

4. Click OK.
   The new module shows up in the list of modules with the name you assigned to it.

To unload a PKCS #11 module, select its name and click Unload.

<< back to top

Enabling FIPS Mode

Federal Information Processing Standards Publications (FIPS PUBS) 140-1 is a US government standard for implementations of cryptographic modules—that is, hardware or software that encrypts and decrypts data or performs other cryptographic operations (such as creating or verifying digital signatures). Many products sold to the US government must comply with one or more of the FIPS standards.

To enable FIPS mode for AOL Communicator, follow these steps:

1. From Identity Manager, open the Edit menu and choose Security Devices.
2. Click the Enable FIPS button.
   When FIPS is enabled, the name NSS Internal PKCS #11 Module changes to NSS Internal FIPS PKCS #11 Module and the Enable FIPS button changes to Disable FIPS.

To disable FIPS-mode, click Disable FIPS.

<< back to top

Security Devices

This section describes the options available in the Security Devices window. If you are not already viewing it, open the Edit menu in Identity Manager and choose Security Devices.

The Security Devices window lists each available PKCS #11 module and the security devices managed by each module below its name.

When you select a security device, information about it appears on the right side of the Security Devices window, and some of the buttons at the bottom of the window become available.

In general, you perform an action on a module or device by selecting its name and clicking the appropriate button:

- Login: Log into the selected security device.
  You will be asked to enter the private key password for the device.
- Logout: Log out of the selected security device. After you have logged out of the device, the device and the certificates it contains will not be available until you log in again.
- Change Password: Change the private key password for the selected security device.
- Load: Displays a dialog box that allows you to specify the name and location of a new PKCS #11 module. Before adding a new module, you should first install the module software on your computer and if necessary connect any associated hardware device. Follow the instructions provided by the vendor.
- Unload: Unload the selected module. If you unload a module, both the module and its security devices are no longer available for use by AOL Communicator.
- Enable FIPS: Turns the FIPS mode on and off. For more information, see Enabling FIPS Mode.

You can perform these actions on most security devices. However, you cannot perform them on the Builtin Object Token or Generic Crypto Services, which are special devices that must be available at all times.

<< back to top

The sections in this document that discuss security, encryption, and privacy are provided by AOL for your information only. They may help you take certain steps to protect the privacy and security of your personal information on the Internet. This document does not, however, address all online privacy and security issues, nor does it represent a recommendation by AOL about what constitutes adequate privacy and security protection on the Internet.

© 2002-2003 America Online, Inc. All rights reserved. Trademark Information

Last Updated September 16, 2003