[Spice-commits] 3 commits - docs/manual

[Marc-André Lureau]

 docs/manual/manual.txt |   60 +++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 58 insertions(+), 2 deletions(-)

New commits:
commit c309e761e8a6d55b64fd14804ccdaaea683929ad
Author: Marc-André Lureau <marcandre.lureau at gmail.com>
Date:   Tue Sep 15 12:41:01 2015 +0200

    manual: add smartcard channel section
    
    Add some basic instructions to setup smartcard channel
    
    Signed-off-by: Marc-André Lureau <marcandre.lureau at gmail.com>
    Acked-by: Christophe Fergeau <cfergeau at redhat.com>

diff --git a/docs/manual/manual.txt b/docs/manual/manual.txt
index 60009b8..a66554a 100644
--- a/docs/manual/manual.txt
+++ b/docs/manual/manual.txt
@@ -540,6 +540,60 @@ which are described when running remote-viewer with `--help-spice`.
 You may need additional services running in the client, such as the
 Spice USB Clerk service on Windows.
 
+CAC smartcard redirection
+=========================
+
+Spice has a dedicated channel for smartcard redirection, using
+libcacard, which currently supports limited CAC emulation.
+
+You may consider redirecting your USB card reader instead. This is
+easier to setup but will prevent from sharing the smartcard with both
+the client and the remote simultaneously.
+
+libcacard is actually emulating a simple CAC card, sharing the card
+and its certificates. It can successfully be used with the coolkey
+PKCS#11 module.
+
+Configuration
+-------------
+
+.Using virt-manager
+
+In the hardware details, click on "Add Hardware", then select
+"Smartcard". Add a "passthrough" device type.
+
+.Using libvirt
+
+Setup a "passthrough" smartcard of type "spicevmc" on a CCID
+controller:
+
+[source,xml]
+<controller type='ccid' index='0'/>
+<smartcard mode='passthrough' type='spicevmc'>
+  <address type='ccid' controller='0' slot='0'/>
+</smartcard>
+
+.Using QEMU
+
+With the qemu command line, you must add a USB CCID device, and a
+"ccid-card-passthru" associated with a "spicevmc" channel with the
+name "smartcard":
+
+[source,sh]
+-device usb-ccid -chardev spicevmc,name=smartcard -device ccid-card-passthru,chardev=ccid
+
+Client
+------
+
+In order for the client certificates to be shared with the remote, you
+need a NSS database configured to access the smartcard. Please look
+for instructions on coolkey or NSS setup and make sure you certficates
+can be listed with certutil.
+
+[NOTE]
+Most Spice clients disable smartcard support by default, and
+need `--spice-smartcard` or similar configuration.
+
 Multiple monitor support
 ========================
 
commit 1b6918f82f5173b8fcd070e0e1174f0765969f8f
Author: Marc-André Lureau <marcandre.lureau at gmail.com>
Date:   Tue Sep 15 12:40:27 2015 +0200

    manual: add missing space
    
    Signed-off-by: Marc-André Lureau <marcandre.lureau at gmail.com>
    Acked-by: Christophe Fergeau <cfergeau at redhat.com>

diff --git a/docs/manual/manual.txt b/docs/manual/manual.txt
index 2a73daf..60009b8 100644
--- a/docs/manual/manual.txt
+++ b/docs/manual/manual.txt
@@ -565,7 +565,7 @@ Configuration
 
 To add an additional QXL device for Windows guests, simply go to your
 virtual machine details. Check that you already have a "Video QXL"
-device, if notclick on "Add Hardware", and add a "Video" device with
+device, if not, click on "Add Hardware", and add a "Video" device with
 model "QXL". This can also work with Linux guests if your are willing
 to configure X.Org to use Xinerama (instead of XRandR).
 
commit a9d9d4b4488662ca82935ea381b5ced87b46c42f
Author: Marc-André Lureau <marcandre.lureau at gmail.com>
Date:   Mon Sep 14 15:45:00 2015 +0200

    manual: update webdav virt-manager section
    
    virt-manager can add webdav channel for a while now.
    
    Signed-off-by: Marc-André Lureau <marcandre.lureau at gmail.com>
    Acked-by: Christophe Fergeau <cfergeau at redhat.com>

diff --git a/docs/manual/manual.txt b/docs/manual/manual.txt
index bc25473..2a73daf 100644
--- a/docs/manual/manual.txt
+++ b/docs/manual/manual.txt
@@ -803,7 +803,9 @@ Configuration
 
 .Using virt-manager
 
-It's currently not possible to configure folder sharing with virt-manager.
+In the hardware details, click on "Add Hardware", then select
+"Channel". Add a "Spice port" device type with the
+"org.spice-space.webdav.0" name.
 
 .Using libvirt