Using the CoolKey Cryptographic Library

Issue:

You want to use the CoolKey cryptographic library. e.g. with CAC, PIV and ALT smartcards, which are used by the US Government.

Problem:

There is no obvious way to activate it in Setup.

Solution:

The CoolKey cryptographic library is contained in IGEL Linux version 5.11.100.

To use it with Kerberos and/or Citrix StoreFront Logon:

  • In Setup, go to Security > Smartcard > Middleware.
  • Select Use a custom PKCS#11 module.
  • As Path to the library enter /usr/lib/pkcs11/libcoolkeypk11.so.

To use it with VMware Horizon:

  • In Setup, go to System > Registry.
  • Set the vmware.view.pkcs11.use_custom parameter to true.
  • Set the vmware.view.pkcs11.custom_path parameter to /usr/lib/pkcs11/libcoolkeypk11.so.

To use it with the Firefox browser:

  • In Setup, go to System > Registry.
  • Set the browserglobal.security_device.custom.enable parameter to true.
  • Set the browserglobal.security_device.custom.device_name parameter to CoolKey.
  • Set the browserglobal.security_device.custom.lib_path parameter to /usr/lib/pkcs11/libcoolkeypk11.so.

    Legal Note

    IGEL's Terms & Conditions apply.


Last update: April 9, 2019