D_Miller_25373
Nov 10, 2011Nimbostratus
Government PIV Card Integration
As I understand the PIV card, it basically holds a PKI Client Certificate.
We need to alert the client browser to, if it has a PIV card client certificate available, send the certificate.
We need to (either on the LTM or within the web application) process the certificate:
- make sure it is current
- make sure it is not revoked
- make sure it is valid (i.e. signed by the appropriate CA).
Then insert either the certificate signature and/or other data elements within the certificate into the HTML header so that the web application can use it to locate the user within the application identity database.
Anyone work with PIV cards? Does this approach sound valid? Any existing iRules available to accomplish all of this?