Authenticate using Common Access Cards
You can use Common Access Cards (CAC) to authenticate connections to Dimensions CM servers.
Dimensions CAC protocol
Use the dimensionscac protocol:
dimensionscac://<servername>[:<port>]/<base database>@<connection>/<product>/<stream>[/<folder>]
Supported security providers
The following table lists supported security providers.
System | Git Client version | Security provider |
---|---|---|
Windows | 2.2 (and later) |
ActivClient 7.1 ActivClient 7.0.2 hotfix 409 |
Linux | 2.3 (and later) |
ActivClient 4.0 hotfix 1704011 OpenSC 0.17 (and later) |
Use CAC card
You can use a CAC card to authenticate when cloning content.
To use a CAC card:
- Insert a CAC card into the reader.
-
Run a
clone
command, for example:git clone dimensionscac://myserver/cm_typical@dim14/qlarius/java_brancha_str .
- If promoted, enter the card’s PIN.
- If there are multiple certificates on the card, select one.
- The content is now cloned.
Change location of security provider libraries (v2.2)
The installer automatically detects your security provider installation and configures Git Client 2.2 to use it.
To manually configure the location of the library:
- Edit this file:
%GIT_HOME%\mingw64\libexec\git-core\start-git-client
Note: The location of start-git-client on your system may be different.
-
Specify the name of the security provider:
export SECURITY_PROVIDER_NAME="ActivIdentity"
-
Locate this line:
export ACTIV_PATH=
-
Edit the path that points to the location of your security provider file:
export ACTIV_PATH=C:\Program Files\ActivIdentity\ActivClient\acpkcs211.dll
Change location of security provider libraries (v2.3)
The installer automatically detects your security provider installation and configures Git Client to use it.
To manually configure the location of the library:
-
Edit this file:
- Windows: %GIT_HOME%\mingw64\libexec\git-core\start-git-client
- UNIX, Linux, and MacOS: /usr/libexec/git-core/start-git-client
Note: The location of start-git-client on your system may be different.
-
Specify the name of the security provider:
-
ActivClient:
export SECURITY_PROVIDER_NAME="ActivIdentity"
-
OpenSC:
export SECURITY_PROVIDER_NAME="SunPKCS11-OpenSC"
-
- Locate this line:
export PKCS11_PATH=
- Edit the path that points to the location of your security provider file:
System | Security provider | Example |
---|---|---|
Windows | ActivClient | export PKCS11_PATH=C:\Program Files\ActivIdentity\ActivClient\acpkcs211.dll
|
Linux | ActivClient | export PKCS11_PATH="/opt/hidglobal/ac.ac4linux.pkcs11/lib64/libac.pkcs220ong.so"
|
OpenSC | export PKCS11_PATH="/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so"
|
Change location of security provider libraries (v2.3.1.1)
The installer automatically detects your security provider installation and configures Git Client to use it.
To manually configure the location of the library:
-
Edit this file:
- Windows: %GIT_HOME%\mingw64\libexec\git-core\setup-git-dm
- UNIX, Linux, and MacOS: /usr/libexec/git-core/setup-git-dm
Note: The location of setup-git-dm on your system may be different.
-
Specify the name of the security provider:
ActivClient export SECURITY_PROVIDER_NAME="ActivIdentity"
OpenSC export SECURITY_PROVIDER_NAME="SunPKCS11-OpenSC"
- Locate this line:
export PKCS11_PATH=
- Edit the path that points to the location of your security provider file:
System | Security provider | Example |
---|---|---|
Windows | ActivClient | export PKCS11_PATH=C:\Program Files\ActivIdentity\ActivClient\acpkcs211.dll
|
Linux | ActivClient | export PKCS11_PATH="/opt/hidglobal/ac.ac4linux.pkcs11/lib64/libac.pkcs220ong.so"
|
OpenSC | export PKCS11_PATH="/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so"
|