The Need for Shared Secrets

Novell® Single Sign-on (NSSO) 2.1 included Novell SecretStoreTM 2.1 and v-GO for Novell Single Sign-on 2.1. You can migrate or remove NSSO 2.1 secrets by using the Novell SecretStore 2.1 Conversion Tool (ss21cvt.exe).

NSSO 2.1 uses SecretStore to securely store credentials (for example, usernames and passwords). Other solutions from Novell, such as Novell DirXMLTM, also use SecretStore. Before SecretStore 3.0, each application stored information in SecretStore in its own way. Therefore, these credentials could not be shared.

For example, if both Novell DirXML and NSSO 2.1 were deployed in an organization, users in that organization provided their usernames and passwords twice, first in NSSO 2.1 and then in DirXML. In addition, if the credentials were ever changed, they had to be changed in both applications.

To resolve these issues, a Shared Secret Format Recommendation was released with SecretStore 3.0. The recommendation allows for applications that use SecretStore to share application credentials, thus relieving the administrative burden of storing duplicate passwords and of synchronizing passwords among applications.

Any single sign-on enabling application that conforms to the Shared Secret Format Recommendation can leverage these secrets. Novell SecureLogin 3.0 conforms to this recommendation. NSSO 2.1 used a different format. ss21cvt.exe converts NSSO 2.1 secrets to the shared secret format.

For more information on shared secrets, see Sharing Secrets in the Novell SecretStore Administration Guide.