--- a/YubikeyManagement.php	Sat Aug 01 01:42:21 2009 -0400
+++ b/YubikeyManagement.php	Mon Aug 03 02:52:59 2009 -0400
@@ -90,8 +90,11 @@
                                          Validation API URL: <span class="yms-copyfield">%validate_url%</span></p>
                                     <p><b>Remember to secure your user account!</b> Your Enano login is used to administer your YMS account. For maximum security, use the Yubikey Settings page of the User Control Panel to require both a password and a Yubikey OTP to log in.</p>',
         msg_no_yubikeys: 'No Yubikeys found',
+        msg_editing_zero: '<b>Notice:</b> You are currently viewing the YMS profile for Client ID 0, the pool of claimable keys. By default, anybody can validate or claim these Yubikeys, but you can prevent validation of these keys by marking them inactive here. All key settings such as lifecycle state and notes are reset when a user claims a key here.',
         btn_add_key: 'Add Yubikey',
         btn_add_key_preregistered: 'Claim a New Key',
+        btn_switch_to_zero: 'Edit claimable pool',
+        btn_switch_from_zero: 'Switch back to my client',
         state_active: 'Active',
         state_inactive: 'Inactive',
         
@@ -115,6 +118,9 @@
         lbl_addkey_field_any_client_name: 'Allow validation by any client:',
         lbl_addkey_field_any_client_hint: 'If unchecked, OTPs from this Yubikey can only be verified by someone using your client ID. Check this if you plan to use this Yubikey on websites you don\'t control.',
         lbl_addkey_field_any_client: 'Other clients can validate OTPs from this key',
+        lbl_addkey_field_allow_claim_name: 'Place key in claimable pool:',
+        lbl_addkey_field_allow_claim_hint: 'After this key is added, YMS will release your ownership of this key so that other users may claim it.',
+        lbl_addkey_field_allow_claim: 'Release this key and allow others to claim it',
         btn_addkey_submit: 'Register key',
         msg_addkey_success: 'This key has been successfully registered.',
         
@@ -130,10 +136,19 @@
         lbl_custom_hint: 'For your security, this is used to validate your ownership of this Yubikey.',
         
         // AES key view interface
+        showaes_heading_main: 'View AES key and counters',
         showaes_th: 'AES secret key for key %public_id%',
         showaes_lbl_hex: 'Hex:',
         showaes_lbl_modhex: 'ModHex:',
         showaes_lbl_base64: 'Base64:',
+        showaes_th_counter: 'Counters',
+        showaes_field_session_count: 'Session count:',
+        showaes_field_session_count_hint: 'Incremented by 1 each time you insert this Yubikey into a USB port.',
+        showaes_field_otp_count: 'OTP count:',
+        showaes_field_otp_count_hint: 'Incremented by 1 each time you press the button on the Yubikey; reset when the Yubikey is plugged in.',
+        
+        err_expected_int: 'Expected an integer',
+        msg_counter_update_success: 'The counters for this Yubikey have been updated.',
         
         // API key view interface
         th_client_id: 'Client ID',
@@ -161,7 +176,7 @@
         btn_note_view: 'View or edit note',
         btn_note_create: 'No note; click to create',
         btn_delete_key: 'Delete key',
-        btn_show_aes: 'Show AES secret',
+        btn_show_aes: 'AES secret and counter information',
         btn_show_converter: 'Binary encoding converter',
         btn_show_client_info: 'View client info',
         
@@ -172,6 +187,11 @@
         acp_field_require_reauth_title: 'Require re-authentication to access YMS interface:',
         acp_field_require_reauth_hint: 'This can be redundant and unnecessary if the sole purpose of your Enano installation is for YMS purposes.',
         acp_field_require_reauth: 'YMS pages require re-authentication',
+        acp_field_claim_enable_title: 'Allow users to claim Yubikeys:',
+        acp_field_claim_enable_hint: 'If you plan to program your own Yubikeys and give them to others, enable this to allow them to create YMS accounts and "claim" the keys so they can see AES secrets and control settings on their keys.<br />
+                                      If you enable this, all Administrators will see an option when adding a new key to put it into the pool of unclaimed keys.<br />
+                                      To claim a Yubikey, YMS requires users to enter a valid OTP, and optionally, an additional field you may configure below.',
+        acp_field_claim_enable: 'Enable the claim system',
         acp_field_claimauth_enable_title: 'Use external authentication when claiming Yubikeys:',
         acp_field_claimauth_enable_hint: 'This allows you to require an additional value - for example, the receipt number from the user\'s Yubikey order - when Yubikeys are claimed.',
         acp_field_claimauth_enable: 'Require additional field to claim a Yubikey',