凭证可以是从简单的密码到复杂的加密密钥的任何东西。
A credential can be anything from simple password to a complex cryptographic key.
支持从凭证高速缓存获得的TGT的使用，支持从密钥表获得密钥的使用。
Support the use of TGTs obtained from a credentials cache and secret keys obtained from key tables.
例如，当调用这个操作时，绑定到一个XKMS密钥的X . 509凭证将被销毁。
For example, an X.509 certificate that's bound to an XKMS key is destroyed when this operation is called.
虽然XKMS使用的密钥绑定信息没有寿命，但是底层pki颁发的凭证偶尔也会有这么一段时间，过了这段时间之后就要周期性地更新。
While there is no lifespan for the key binding information used by XKMS, the credentials issued by the underlying PKI occasionally do have a time span that must be renewed periodically.
数字证书不仅仅是一个加密密钥，它还是一个在线凭证。
A digital certificate is more than just a cryptography key; it is an online credential.
注意TGT和密钥保存在私有的凭证集中。
Note that the TGT and secret key are saved in the private credentials set.
这要求将外部可见的主机名的凭证存储在一个CryptographicMessageSyntax (CMS)密钥数据库文件中。
This requires that a certificate for the externally visible hostname be stored in a Cryptographic Message Syntax (CMS) key database file.
这些凭证，以及用于验证其他方凭证的root凭证，存储在一个密钥数据库中，这个密钥数据库是随ConnectionManager一起安装的。
These certificates, along with root certificates to validate the other party's certificate, are stored in a key database that is installed with Connection Manager.
LotusExpeditor还通信将身份验证信息，如用户名和密码，保存在加密密钥库来保护用户凭证。
Lotus Expeditor also protects user credentials by storing authentication information, such as user names and passwords, in an encrypted key store.
支持缺省凭证；将缺省TGT或密钥的所有者作为主体安装在Subject里。
Support default credentials; install the owner of the default TGT or secret key as the principal in the Subject.
可把服务主体的密钥加给JAASSubject，强化将JAAS Subject用做一个GSSAPI凭证的中央资源库的目标。
The secret key of a service principal can be added to the JAAS Subject, furthering the objective of using the JAAS Subject as a central repository of GSSAPI credentials.
登录模块还可以使用一个来自凭证高速缓存的已存在的TGT或是来自密钥表的已存在的密钥。
The login module can also use an existing TGT from a credentials cache or an existing secret key from a key table.
在多个凭证可用的场合，例如，在一个凭证高速缓存或一个密钥表，对缺省的凭证的选择可取决于很多因素。
Where multiple credentials are available, for example, from a credentials cache or a key table, the choice of default credentials can be based on a number of factors.
这表明最经常添加到密钥表或凭证高速缓存的凭证是最合理的缺省选项；这当然是最简单的一种选择。
It can be argued that the most recent addition to a key table or a credential cache is the most reasonable choice as a default; it is certainly one of the simplest choices.
它从Subject获得这些凭证和密钥，并且如果Subject没有包含必要的凭证和密钥时就会失败。
It obtains these credentials and secret keys from the Subject and fails if the Subject does not contain the necessary credentials and secret keys.
为达到简洁性，登录模块根据凭证和密钥加到Subject的时间来选择缺省的凭证和密钥；从此时起即为KerberosCredentials中的时间戳记。
For simplicity, the login module chooses default credentials and secret keys based on the time when they were added to the Subject; hence, the timestamp in KerberosCredentials.
为达到简洁性，登录模块根据凭证和密钥加到Subject的时间来选择缺省的凭证和密钥；从此时起即为KerberosCredentials中的时间戳记。
For simplicity, the login module chooses default credentials and secret keys based on the time when they were added to the Subject; hence, the timestamp in KerberosCredentials.
应用推荐