[ePO 4.6] Keystore on managed system

[Former Member]

Hi,

i'm looking for an answer about the keystore on a managed system : why is it  possible, for a simple user, to access at all keys in read mode?

Could you tell me what is the use of these keys?

• agentprvkey.bin
• agentpubkey.bin
• serverpubkey.bin
• serverreqseckey.bin

Thanks for all.

[jstanley · Accepted solution]

Users can read the files but VSE AP rules should prevent them from being modified/deleted. The files are obfuscated and encrypted so their is not much the users can do with read only access anyway. They are used for encrypting/decrypting traffic between the agent and ePO. The names suggest their use but here it is explicitly:

• agentprvkey.bin = Agent Private Key
• agentpubkey.bin = Agent Public Key
• serverpubkey.bin = ePO Server Public Key
• serverreqseckey.bin = ePO Server’s Request Secret Key

[Former Member]

Hi, i have an other question.

Please, could you tell me exactly when and why the "ePO Server’s Request Secret Key" is used?

Is it just used for initiate the connection between the Agent to the server ?

Thanks for all

Ce message a été modifié par: lexus on 24/09/12 04:45:12 CDT

[Former Member]

Did someone have an answer please?

[JoeBidgood]

It's used to secure the initial exchange of keys between agent and server, so that the agent's key (which is created on the client machine) can be securely sent back to the server.

HTH -

Joe