Tuesday, August 26, 2008

SmartCard Testing for SOAP and Web Services

A.E.T. Europe B.V. and Crosscheck Networks Partner to Deliver Industry-First SOA Testing Solution for Strong Authentication.

Testing for signatures, encryption, decryption, and X.509 client authentication is now seamlessly provided within the SOAPSonar testing framework.
SOAPSonar provides the ability to use keys from a SmartCard to perform digital signatures, encryption, decryption, and SSL X509 mutual authentication. SOAPSonar provides a native integration with A.E.T SafeSign Client software to dynamically access the digital keying information on the card.

Setup for SmartCard Integration Support

SOAPSonar will recognize the existence of A.E.T. SafeSign Client on the machine where is it running and integrates natively through the API to provide seamless access to the smartcard key pair. The first requirement for SmartCard support is to install the A.E.T. SafeSign Client. For more information about how to obtain and install the A.E.T. SafeSign Client, please visit http://www.aeteurope.com. For more information how to obtain and install the Crosscheck Networks SOAPSonar testing tool, visit http://www.crosschecknet.com.


Using a SmartCard Key for Signing, Encryption, or Decryption

Follow the steps below to use a SmartCard Key for digital signatures, encryption, or decryption:

1) Ensure A.E.T. SafeSign Client has been installed

2) Attach the card reader

3) Insert the card key

4) Go to the Test Case node in SOAPSonar and click on the Request Tasks tab

5) Create a new Signature, Encryption, or Decryption Task and click on the key icon to select the Key Pair

6) Go to the Current User->My Folder and select the key pair name of the smart card key

Using a SmartCard Key for SSL X509 Mutual Authentication

Follow the steps below to use a SmartCard Key for SSL X509 Mutual Authentication:

1) Ensure A.E.T. SafeSign Client has been installed

2) Attach the card reader

3) Insert the card key

4) Go to the Test Case node in SOAPSonar and click on the Authentication tab. If you want to create a global policy for authentication, instead click on the Policy node under the configuration tab and navigate to the Authentication tab.

5) Under the SSL authentication section, click on the key icon to select the Key Pair

6) Go to the Current User->My Folder and select the key pair name of the smart card key


0 comments: