OSX and Aladdin eToken

Due to the nature of my work, and my fondness of Apple products I wasn't able to get my Aladdin eTokens working with OSX. After several months of not trying to crack this I decided to try it again.
The trigger for me was stumbling on the possibility of adding so-called keyfiles to the eToken for accessing TrueCrypt volumes.

First challenge was the eToken PKI software for OSX... Thankfully I'm a Certified eToken guru, so I've got access to their download area (you will have to get your own software). The current version of the eToken software for OSX is v4.55. I installed the Aladdin software on OSX 10.5.5.

This time, the installation of the software was successful, and the software is almost identical to the Windows version (PKI Monitor and eToken Properties software).

eToken PKI Software eToken PKI Software for OSXAfter the installation you can configure various application to utilize the power of eTokens. I configured FireFox and TrueCrypt (so far) to use an eToken.

FireFox

Open the FireFox Preferences -> Advanced -> Encryption -> Security Devices, and click load.

Add the following information:Load PKCS#11 device Load PKCS#11 device

Module Name: <any name you fancy :) >
Module Filename: /usr/local/lib/libeTPkcs11.dylib

This should add the eToken security device in the Device Manager panel.

Security Devices panel Security Devices panelAt this point, you can use your eToken with Firefox. Next TrueCrypt....

TrueCrypt

Open the TrueCrypt preferences, and select the Security tokens 'tab', and add the following location for the library path:

/usr/local/lib/libeTPkcs11.dylib

TrueCrypt Security Tokens library path TrueCrypt Security Tokens library pathAfter adding the library path you can use your eToken to hold your keyfiles for secure access to your private data stored in a TrueCrypt container. Just don't loose your eToken :)

Next mission is to add additional smartcard support (SafeSign based) to the Mac, so I can use my official digital certificates on my Mac for accessing company resources.

UPDATE: The good people of AET Europe contacted me, and mailed me the SafeSign software for OSX. Expect an evaluation soon.

Posted on December 4, 2008 and filed under Apple, Security, Tips'n Tricks.