This document is a Mac OS X manual page. Manual pages are a command-line technology for providing documentation. You can view these manual pages locally using the man(1) command. These manual pages come from many different sources, and thus, have a variety of writing styles.

For more information about the manual page format, see the manual page for manpages(5).

sc_auth(8)                BSD System Manager's Manual               sc_auth(8)

NAME
     sc_auth -- smart card authorization setup script

SYNOPSIS
     sc_auth accept [-v] [-u user] [-d domain] [-k keyname]
     sc_auth accept [-v] [-u user] [-d domain] -h hash
     sc_auth remove [-v] [-u user] [-d domain]
     sc_auth hash   [-k keyname]
     sc_auth list   [-v] [-u user] [-d domain]

DESCRIPTION
     sc_auth configures a local user account to permit authentication using a supported smart card.  Authen-tication Authentication
     tication is via asymmetric key (also known as public-key) encryption.  sc_auth works with signing keys,
     but not encryption keys.

     sc_auth can perform the following actions:

     accept   Associate a user with a public key on a card.  The key to use can be specified either by its
              name or its hash.

     remove   Remove all public keys associated with a user.

     hash     Print the hashes for all keys on all inserted cards.

     list     List all public keys associated with a user.

OPTIONS
     -u user  Specifies the user whose account is to be modified

     -d domain
              Specifies the directory domain containing the user account

     -k keyname
              Specifies a public key by its name

     -h hash  Specifies a public key by its hash

     -v       Verbose mode

NOTES
     sc_auth is a shell script.  It is intended to be modified by administrators to suit their local envi-ronments. environments.
     ronments.

     sc_auth is only known to work with a local directory.  Consult the script's source for some limited
     guidance to using remote directories.

BUGS
     sc_auth hash might display the hashes of encryption keys as well as signing keys, even though sc_auth
     accept does not work with encryption keys.

MacOSX                         December 11, 2006                        MacOSX