Project

General

Profile

PIN Secret » History » Version 7

Version 6 (Tobias Brunner, 11.05.2011 13:09) → Version 7/10 (Tobias Brunner, 28.10.2011 17:59)

h1. PIN Secret

*IKEv1* uses the format @%smartcard[<slotnr>[:<keyid>]]@ to specify the smartcard selector. The *IKEv2* daemon supports multiple modules (configured in [[SmartCardsIKEv2|strongswan.conf]]) with the format <code>%smartcard[<slotnr>[@<module>]]:<keyid></code>, but always requires a keyid to uniquely select the correct key. Instead of specifying the pin code statically, _%prompt_ can be specified, which causes the daemons to ask the user for the pin code.

h2. Notation

: PIN _<smartcard selector>_ _<pin code>_ | _%prompt_

h2. Examples

<pre>
: PIN %smartcard1:50 1234

# only with IKEv2
: PIN %smartcard@opensc:45 %prompt
</pre>