ModuleManagerAuthenticate

If both a Table of Contents and Search form are not displayed in separate frames along with this one, you may wish to redisplay this book in a frameset, beginning with the first page.

HP Open Source Security for OpenVMS Volume 1:...

Elective Module Manager APIs

Initialize

RefreshFunctionTable

ModuleManagerAuthenticate

Parameters
Description
Return Value
See Also

NAME

ModuleManagerAuthenticate - Module manager authentication

SYNOPSIS

# include <cdsa/mds.h>

CSSM_RETURN CSSMAPI ModuleManagerAuthenticate(CSSM_KEY_HIERARCHY KeyHierarchy,const CSSM_GUID *CssmGuid,const CSSM_GUID *AppGuid,CSSM_MANAGER_REGISTRATION_INFO_PTR FunctionTable)

PARAMETERS

`KeyHierarchy` (input)
		The CSSM_KEY_HIERARCHY flag indicating which embeddedkey(s) CSSM should use when verifying the integrity of the modulemanager.
`CssmGuid` (input)
		A CSSM_GUID value identifying the calling CSSM.The elective module manager can use this value to locate the signedmanifest credentials for CSSM.
`AppGuid` (input/optional)
		A CSSM_GUID value identifying the application whoinvoked the calling CSSM. The elective module manager can use thisvalue to locate the signed manifest credentials for the application.
`FunctionTable` (output)
		A set of function pointers for EMM-defined functionsused by CSSM to communicate state changes related to module attachand module detach operations.

DESCRIPTION

This function should perform the elective module manager'shalf of the bilateral authentication procedure with CSSM. The CssmGuid isused to locate the CSSM's credentials to be verified. The credentialsare a zipped, signed manifest.

The KeyHierarchy indicates which publickey should be used as the root when checking the integrity of the modulemanager. The AppGuid is used to locate the application'ssigned manifest credentials. The elective module manager must checkthe application's credentials to verify the application's authorization.If no privileges are requested, then the application is not requiredto provide a GUID nor a set of signed manifest credentials.

Upon successful completion, the elective module manager returnsits function table to the calling CSSM. The EMM function table containsthe set of EMM entry points that CSSM uses to notify the modulemanager of significant events such as module attach and module detachrequests issued by an application, and event notifications issuedby other module managers.

This function symbol must be exported by the elective modulemanager, so CSSM can invoke this function upon completion of theloading process.

This function is the first module manager interface invokedby CSSM after loading and invoking the main entry point. In particular,the elective module manager's initialize function is invoked byCSSM after this function has successfully completed execution.

RETURN VALUE

A CSSM_RETURN value indicating success or specifying a particularerror condition. The value CSSM_OK indicates success. All othervalues represent an error condition.