Nexus Documentation

Write data objects to smart cards

This article describes how to write data objects to smart cards in Identity Manager by defining the encoding description and applying extra attributes to the description file. 

Define encoding description

  • Define the encoding description. 

[Fields]
OBJECT_DATA=
USER_NAME=
...
  
[Application_A]
DataObject=OBJECT_DATA
LabelExpressionDataObject=Issued for !{USER_NAME}

Element

Description

DataObject=...

Specifies from which defined field the object data is taken. The field's value must be base64 encoded.

LabelExpressionDataObject=....

The label (CKA_LABEL value) for the data object. It is possible to put the text directly or use the expression language to access fields.

Apply extra attributes

  • Apply extra attributes to handle more complex objects.
    Example:

[Application_A]
DataObject=OBJECT_DATA
AttributesDataObject=CKA_PRIVATE=TRUE,CKA_APPLICATION="IDM",CKA_OBJECT_ID=1.2.3.4.5,...

  • Supported attributes:

Attribute

Data type

Value (as appearing in the .dsc file)

CKA_PRIVATE

CK_BBOOL

TRUE | FALSE

CKA_COPYABLE

CK_BBOOL

TRUE | FALSE

CKA_MODIFIABLE

CK_BBOOL

TRUE | FALSE

CKA_DESTROYABLE

CK_BBOOL

TRUE | FALSE

CKA_APPLICATION

byte array

For example: "IDM" - quoted text

CKA_OBJECT_ID

byte array

For example: 1.2.3.4.5 - ASN.1 Object Identifier Literal

The support of the attributes depends on the middleware and the version of the middleware.

Last updated: