ChromeEnterprisePlatformKeys class
Methods
-
challengeKey(ChallengeKeyOptions options)
→ Future<ByteBuffer>
-
Similar to
challengeMachineKey and
challengeUserKey, but allows specifying the algorithm of a
registered key. Challenges a hardware-backed Enterprise Machine Key and
emits the response as part of a remote attestation protocol. Only useful
on Chrome OS and in conjunction with the Verified Access Web API which
both issues challenges and verifies responses.
-
challengeMachineKey(ByteBuffer challenge, bool? registerKey)
→ Future<ByteBuffer>
-
Challenges a hardware-backed Enterprise Machine Key and emits the
response as part of a remote attestation protocol. Only useful on Chrome
OS and in conjunction with the Verified Access Web API which both issues
challenges and verifies responses. A successful verification by the
Verified Access Web API is a strong signal of all of the following:
-
challengeUserKey(ByteBuffer challenge, bool registerKey)
→ Future<ByteBuffer>
-
Challenges a hardware-backed Enterprise User Key and emits the response
as part of a remote attestation protocol. Only useful on Chrome OS and in
conjunction with the Verified Access Web API which both issues challenges
and verifies responses. A successful verification by the Verified Access
Web API is a strong signal of all of the following:
-
getCertificates(String tokenId)
→ Future<List<ByteBuffer>>
-
Returns the list of all client certificates available from the given
token. Can be used to check for the existence and expiration of client
certificates that are usable for a certain authentication.
|tokenId|: The id of a Token returned by
getTokens.
|callback|: Called back with the list of the available certificates.
-
getTokens()
→ Future<List<Token>>
-
Returns the available Tokens. In a regular user's session the list will
always contain the user's token with
id "user".
If a system-wide TPM token is available, the returned list will also
contain the system-wide token with id "system".
The system-wide token will be the same for all sessions on this device
(device in the sense of e.g. a Chromebook).
-
importCertificate(String tokenId, ByteBuffer certificate)
→ Future<void>
-
Imports
certificate to the given token if the certified key
is already stored in this token.
After a successful certification request, this function should be used to
store the obtained certificate and to make it available to the operating
system and browser for authentication.
|tokenId|: The id of a Token returned by getTokens.
|certificate|: The DER encoding of a X.509 certificate.
|callback|: Called back when this operation is finished.
-
noSuchMethod(Invocation invocation)
→ dynamic
-
Invoked when a nonexistent method or property is accessed.
inherited
-
removeCertificate(String tokenId, ByteBuffer certificate)
→ Future<void>
-
Removes
certificate from the given token if present.
Should be used to remove obsolete certificates so that they are not
considered during authentication and do not clutter the certificate
choice. Should be used to free storage in the certificate store.
|tokenId|: The id of a Token returned by getTokens.
|certificate|: The DER encoding of a X.509 certificate.
|callback|: Called back when this operation is finished.
-
toString()
→ String
-
A string representation of this object.
inherited
