FIM2010 CM diversify admin key data store
Hi, I'm configuring a smartcard profile and would like to use the Diversify Admin Key feature in order to secure the Admin PIN and be sure it is different from one card to the other. Since Admin Key information is a very sensetive what will be the best recommended way to secure this data and is there a way to encrypt it? Avi
December 25th, 2010 5:27pm

Hello Avi, When you select the option to diversify admin keys with the default initialization provider, FIM CM will use its own custom algorithm to uniquely generate a new 24-byte key and set it on the card. The key is encrypted and securely transmitted to the client. It is not stored in the database or anywhere else; FIM CM will re-calculate it any time it needs to authenticate to the card.
Free Windows Admin Tool Kit Click here and download it now
December 27th, 2010 1:22pm

Thanks allot Henna, This is very helpful.
December 27th, 2010 1:39pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics