A smartcard is a cryptographic device, an HSM of sorts, that is programmable and may be used for identification, authentication, private key storage, digital signatures, and other security functions.

learn more… | top users | synonyms

1
vote
1answer
39 views

Passwordless login: virtual smart card with no pin? [closed]

I would like to set up a domain-joined computer for passwordless login with some low-privileged domain account that is specific to that computer. I've seen some blog posts that store the username and ...
3
votes
1answer
78 views

How can I tell which users credentials are cached on a local system?

I'm troubleshooting cached credentials on Windows 7, specifically Smart Card logins, and I would like to know how I can find out which users currently have their credentials cached on the machine. I ...
4
votes
0answers
64 views

Windows server 2012 R2 - delay before certificates start working

I have this weird unexplained delay before the certificates i put in my servers start actually working it goes something like this: I add the certificates snap-in to mmc to manage the computer ...
0
votes
0answers
65 views

Is there any build of WUDFUsbccidDriver.dll compatible with windows XP x-64?

I want to load WUDFUsbccidDriver.dll (version 6.1.7600.16385) into a 64-bit edition of windows XP, but there is some lost dependencies that unables windows to load this driver correctly and fails with ...
2
votes
1answer
31 views

How would one configure an IIS that has SSL and client certs functional, to show a warning page before logon

I have a web site that uses a CAC client certificate, which is functioning like it should. The problem is, there's a requirement that the site regurgitate a message warning that it's a US Government ...
4
votes
0answers
70 views

Smart Card S/MIME with Exchange 2013

I have an Exchange 2013 environment that I'm trying to implement S/MIME with smart cards. To the best of my knowledge, and the little help I have received on TechNet, I have configured my Exchange ...
0
votes
2answers
121 views

Linux smart card authentication

I am using puttysc to authenticate to a remote Linux server with my smart card . But as I understand, this isn't true PKI authentication - puttysc just unlocks the public key and matches it to a user ...
0
votes
1answer
804 views

Connecting to Server 2012 R2 using HP ThinPro (freeRDP), but smart card is not reading correctly

In preparation to deploy our new 2012R2 RD farm, we have updated our HP thin clients to ThinPro 5.0. They connect just fine using username/password, but when I try to use a smart card, I get the ...
1
vote
1answer
5k views

Slow logon via Remote Desktop to Server 2012 and Smart Card service errors

When I logon my Server 2012 R2 server via Remote Desktop it sits at the logon screen for 10-20 seconds before logging me in. Once logged in I found the following three errors in the Windows System ...
0
votes
0answers
241 views

Smart Card Logon & next hop SSO RDP Login

I started to expriement with smart card based login. So far I can logon to my local PC using my smart card. What doesn't work is using sso when connecting via RDP to another server. I get the error ...
1
vote
1answer
178 views

Require smart cards for connections to Windows 2012 remote access server

We have a Windows 2012 server accepting VPN connections over SSTP and authenticating them using the Network Policy Server feature on the same server. For client authentication we've set it up to ...
5
votes
1answer
606 views

How do I configure AD CS to support Name Constraints (4.2.1.11 in RFC 2459)?

I am trying to figure out how to do Qualified Subordination with the critical extension set, but I'm unable to figure out how to do this in MSFT AD CS. For a given certificate, how do I make sure ...
1
vote
0answers
1k views

KDC Certificate error using smartcard and Remote Desktop

Our Active Directory domain recently enforced smart card logons for administrator accounts. Since this change we have been unable to access some servers (2008 R2) using Remote Desktop. When attempting ...
1
vote
0answers
320 views

Windows Server 2008 - Smart Card service is down

I'm getting this weird error when trying to work with a SmartCard on an ec2 machine running Windows Server 2008. I'm using AnywhereUSB to connect my physical smart-card reader to the remote machine. ...
3
votes
1answer
77 views

Windows users with smartcards using Lync Android app

We have a Windows network where users are required to log in using a smartcard instead of a password. Is there a way of allowing our users to use the Andoroid/iOS Lync app, even though they don't ...
2
votes
0answers
249 views

Web Server with PKCS11 support for server certificates?

I have a PKCS#11-compatible smart card with either a private key, or a combination of a certificate and a private key on it (I can have both). I want to present the certificate from the smart card to ...
0
votes
0answers
150 views

Use server-side certificate from Smart Card in IIS

I have a Smart Card (actually a USB dongle, called a Feitian ePass2003) with a certificate and its accompanying private key on it, and I want to use this certificate to serve my SSL site in IIS. To ...
0
votes
1answer
480 views

Smartcard Sharepoint Password prompt

I work in an organization that uses smartcard login. Passwords are not be used. When opening an attachment in Sharepoint, we are prompted with a username/password dialog. Clicking cancel will allow ...
1
vote
0answers
121 views

whats the general process for using a smart card in truecrypt?

I'm a little confused with how to deploy truecrypt our environment I purchased a few smartcards (ACOS5) that are supposedly compatible with truecrypt however i'm unable to make it all work due to ...
2
votes
1answer
7k views

Revocation status of DC can't be verified

A Domain Controller within my forest was working fine (as the story usually goes). Then, suddenly, I can't logon with my smart card. Instead, I'm greeted with the following message: The system ...
1
vote
1answer
448 views

Possible to disable smart card PIN change in Windows 7?

I'm looking for a way to disable the smart card PIN change ability provided with Windows 7's native minidriver. It doesn't allow us to enforce any PIN complexity requirements such that users could ...
0
votes
1answer
115 views

Is special software necessary (apart from card reader drivers) to use a smartcard for authentication on websites?

Our company now begins to use SmartCards as the online portal for tax administration that we use requires authentication. I have never before worked with SmartCards. The device drivers are installed ...
0
votes
2answers
164 views

Windows facilities to generate keys and sign certificate signing requests on smart-cards

Does windows Vista/7 provide some sort of generic utilities and facilities to generate a non-exportable RSA/DSA key on a smart-card and sign a CSR from a smart-card? any hints/tips/pointers ...
2
votes
0answers
438 views

How to disable Windows Server 2003 terminal server PIN login without losing smart card support?

The users of a Windows Server 2003 terminal server should be able to use their national identity card (a smart card) inside the terminal session. This requires the Remote Desktop Connection's [x] ...
8
votes
3answers
7k views

Open source system for swipe card access? [closed]

We're looking at replacing our campus-wide magnetic swipe card system with something more robust. The "programmer" side of me says there's got to be an open-source, scalable solution that already does ...
1
vote
2answers
170 views

Searching a smartcard that's crossplatform

I'm searching a smart card for storing (PKI) certificates. The certificates on the smart card need to be retrieved on Windows (supporting Active Directory login), Linux, and Mac OS X. I found some ...
0
votes
1answer
854 views

Smartcard (USB Cryptostick) and Firefox

I am having a GPF-Cryptostick running on ubuntu 11.04 with firefox 5.0. Using a smartcard is such a great thing, but i did not found any good how-tos. Maybe it is just a lack of understanding. First: ...
8
votes
2answers
2k views

Smart card authentication to a Cisco switch?

We have our Cisco network devices configured to authenticate network administrators using their domain accounts via RADIUS running on a Windows 2008R2 server with the network protection role. This ...
4
votes
1answer
187 views

Smart card / auditable access for rack KVM tray

Is there such a thing as a KVM Tray for a standard 19" rack whose use can be validated by a smartcard (or some other auditable authentication method)? It looks like we have a security requirement ...
0
votes
1answer
1k views

Security Token for Mac/Linux/Windows, self-managed, pref. open source?

I'm looking to buy an evaluation security token (combined smart card/usb reader) for my business that works on: Windows 7 x64 OS X 10.6.x x64 Ubuntu Linux (64 or 32 bit, 10.04 or 10.10, I can bend ...
0
votes
2answers
9k views

Custom Certificate Template is listed as unavailable

I am trying to create a custom certificate template based off of the Smartcard User template with a Windows Server 2008 Enterprise subordinate CA. I am using the subordinate CA because the root CA is ...
1
vote
0answers
791 views

Smart Card Compatibility Issues with Mac OS X Snow Leopard

I am working on an iMac running 10.6.4. I am trying to get a smartcard (Athena ASEKey USB Token) to be recognized by the system. Note: this smartcard is not for local system authentication. It is for ...
0
votes
1answer
3k views

How to disable smart card logon on windows server 2003 domain for one user

I have CA on the same server (windows 2003) as my second domain server. I created certificate for my user In Administrative Tools->Active Directory Users and Computers->(My user)->Account ...
2
votes
1answer
651 views

Is it possible to change a domain controller's GUID?

I have a large number of separate Active Directory domains (~150) consisting of 2 server clusters that I need to setup for smart card login. To do this I will have to request ~300 domain controller ...
1
vote
5answers
782 views

Windows SmartCard for Shared Workstations

We have a Windows x64 workstation that controls special equipment critical to our operations. This workstation only has a set few of trained operators who "know" how to operate it. However, it runs ...
2
votes
1answer
1k views

How do you use a smartcard to log in to Windows from a linux box?

I'm using CentOS 5.3 and I want to use the Terminal Server Client to remote log in to a WindowsXP machine that uses smartcards exclusively to access the domain accounts. How can I set up the ...
2
votes
1answer
1k views

How do you enable a CAC card in Firefox on linux?

I want to enable a Common Access Smart card on CentOS 5.3 x86_64 in Firefox. What is the easiest procedure to do this?
3
votes
2answers
4k views

Is it possible to fix “Logon User Interface DLL acmsgina.dll failed to load”?

Here is the scenario: installing an update to ActivCard (6.1) to a Windows XP laptop. After the required reboot, Windows XP brings up the default blue background, waits for quite a long time and then ...