Questions tagged [smartcard]

A smartcard is a cryptographic device, an HSM of sorts, that is programmable and may be used for identification, authentication, private key storage, digital signatures, and other security functions.

Filter by
Sorted by
Tagged with
1 vote
0 answers
420 views

Smart card reader not able to detect in remote host

I have a situation where Host A (USB smart card reader connected) trying to RDP'ed to Host B, however, Host B was not able to detect the smart card reader on Host A in the remote session. Thing I have ...
user avatar
1 vote
1 answer
69 views

How do I get my server HSM working while connected via RDP? (Win 2019)

The error I get from pkcs11-tool.exe is "No slots." My server has a hardware security module (Nitrokey HSM 2) that becomes inaccessible once I connect to my server via Windows Remote Desktop....
user avatar
0 votes
0 answers
264 views

Axway Desktop Validator

I have a windows server 2008R2 set up, we recently updated our servers personal certs and did a network reboot. Everything was fine for a few days until our weekly network reboot took place and from ...
user avatar
  • 23
0 votes
0 answers
31 views

Windows session using smart card is immediately locked out when I open Chrome browser

I have an issue with Google Chrome, ever since update above version 86, the windows session is locked out when i open the browser. That is only when i use smart card authentication. I'm guessing it ...
user avatar
  • 282
0 votes
0 answers
617 views

Making (virtual) smartcard available to system service

I have a VM running Windows Server 2019 Datacenter Core, which is running a Jenkins build agent as a noninteractive service with its own local user account (.\build). Now I'd like to add code signing. ...
user avatar
-2 votes
2 answers
235 views

Active Directory 2 Factor Authentication with Smartcards

I need 2 Factor Authentication with Smartcards, so i want to login with an Password and a Smartcard. I know that Smartcards have passwords, but my company doesn't like this solution. Is there a way to ...
user avatar
0 votes
0 answers
967 views

Trying to create a Powershell script to connect to a server via smart card

Sorry if this is in the wrong community but it seemed the best. My organization is trying to automate the commands that it has done manually before (Indexing computer storage, etc.). However, we use ...
user avatar
  • 101
0 votes
1 answer
133 views

RDP Credentials Manager hangs when NFC pad has been connected

I'm struggling with a problem with RDP in a local domain environment. Everything usually works perfectly, and I can remote into any client or server within the domain. However, I'm working on a ...
user avatar
  • 101
1 vote
1 answer
862 views

Openssh and smart card

I'm trying to connect to a remote host using a smart card (the same I use to login on my system). I extracted the rsa key from the smartcard: $ ssh-keygen -D /usr/lib/opensc-pkcs11.so -e ssh-rsa ...
user avatar
1 vote
1 answer
2k views

Smartcard Authentication on Windows Domain Controller using Yubikey for Windows Login

I have a Yubikey 5 NFC and I am trying to configure it on a test bench for windows login authentication. I cannot seem to get the certificate to enroll on the Yubikey. I have followed the Yubikey ...
user avatar
2 votes
1 answer
670 views

smart card for UAC only

I'm in the process of configuring USB Yubikeys as a smart card for our company so that staff can elevate to an admin account (added to the computer's local administrators group) by simply inserting ...
user avatar
  • 548
1 vote
1 answer
2k views

Use Smartcard Reader on Azure Remote Desktop

What I want to achieve: Plug a Smartcard Reader on my Laptop Connect to my private Azure VPN Use Remote Desktop to access a Server using User and Password, with Intelligent Card option and USBs ...
user avatar
  • 51
3 votes
1 answer
84 views

Smart Card removal behavior and card renewal

My customer is planning to introduce new Policy regarding smart card removal in their Windows Environment, most probably session break since it's a Citrix environment. Microsoft documentation on the ...
user avatar
  • 238
1 vote
0 answers
65 views

How to allow a newly inserted user certificate with Apache 'SSLVerifyClient optional'?

My web users are able to optionally use a Smart Card Certificate to identify themself via Firefox to my web server running Apache httpd 2.4. For this I use SSLVerifyClient optional plus for speed ...
user avatar
2 votes
1 answer
288 views

SSH with Yubikey and intermediate host

I'm on macos with a Yubikey. The Yubikey's publickey is added to ServerA and ServerB. I can connect to any server directly from macos with the Yubikey plugged in. Is it possible to SSH to ServerA and ...
user avatar
  • 23
0 votes
0 answers
3k views

Prevent Smart Card prompt when looking for Enrollment Certificate

I'm using an Enrollment Agent user certificate to amend CSRs (in order to add SANs) My method is working fine - using the following command: certreq -config "CertAuth" -policy "PathtoCSR" "Path to ...
user avatar
0 votes
1 answer
85 views

How to view signatures fulfilling the "Authroized Signatures" option in a Smart Card Logon certificate from a Windows CA

I'm playing with the Windows Server CA role and Smart Card logons. We have a working PKI setup and smart card issuance/logon working. What I'm curious about is the "Require this number of authorized ...
user avatar
5 votes
0 answers
825 views

Smart card error from Remote Desktop app

On Windows 10 there are two apps to remotely connect to another computer. One is old Remote Desktop Connection (mstsc.exe) and the other is modern Remote Desktop (RdClient.Windows.exe hidden somewhere ...
user avatar
0 votes
1 answer
1k views

Office365 with AD FS Without Azure AD

This should be a simple question, but Microsoft's documentation isn't completely clear on the matter. I may have a job coming up where I'll be setting up a new Windows Server 2016 Standard deployment ...
user avatar
3 votes
1 answer
1k views

Encrypt/Decrypt filesystem container file with smartcard on linux

I want to encrypt and decrypt a file system container file with luks and a smartcard on debian linux. The smartcard is a Nitrokey Start which is basically a compact smartcard in a usb reader. I know ...
user avatar
2 votes
1 answer
1k views

Smart Card Windows Auth without PIN

Does anyone know of a simple and secure method of logging into a Windows 10 domain PC without having to type ANYTHING? I have remote workstations that I'd like to access using NVIDIA'S Gamestream ...
user avatar
  • 123
1 vote
1 answer
526 views

How to manage smartcards for Windows logon (inventory, certificates, expirations, etc.)?

We are implementing smartcards to comply with two-form authentication using the builtin support in Windows + AD, using YubiKeys and Gemalto .NET cards. As an admin I can issue new certificates for ...
user avatar
  • 193
0 votes
1 answer
1k views

Windows Shared User Accounts with smart cards

I'm looking for a way to use smart cards to lock and unlock windows workstations used by shared user accounts. 1) We want to lock/unlock the shared user account with each user's personal staff card. ...
user avatar
  • 3
6 votes
1 answer
9k views

Joining AD domain with Windows 10 using smart card

My Windows "domain-centric" company has abruptly decided to make the switch from Windows 7 to Windows 10, and it has become my job to make their prepared image join our domain with our smart card/...
user avatar
  • 61
4 votes
0 answers
63 views

Why does RDS login screen vary by user and PC?

I have two identical Lenovo laptops running Windows 10 with all updates. Call them Left and Right. On the backend I have a domain controller and a Remote Desktop Server, both running Windows Server ...
user avatar
0 votes
1 answer
5k views

pkcs11_lib - NSS Initialize Failed (bad database?)

I'm having trouble getting PKCS#11 and PAM to work, for whatever reason nss has stopped working and I can't create a new database. Here's the output from PKCS11 and NSS: DEBUG:pkcs11_lib.c:187: ...
user avatar
  • 215
3 votes
2 answers
60k views

Smartcard Logon: The domain specified is not available. Please try again later

I'm standing up a test lab. Using AD CS, I've deployed a smartcard logon cert to an HID Crescendo C1150. When I attempt to log on to a WIN7 workstation with the smartcard, I'm greeted with: The ...
user avatar
1 vote
1 answer
1k views

Passwordless login: virtual smart card with no pin? [closed]

I would like to set up a domain-joined computer for passwordless login with some low-privileged domain account that is specific to that computer. I've seen some blog posts that store the username and ...
user avatar
  • 201
4 votes
1 answer
2k views

How can I tell which users credentials are cached on a local system?

I'm troubleshooting cached credentials on Windows 7, specifically Smart Card logins, and I would like to know how I can find out which users currently have their credentials cached on the machine. I ...
user avatar
  • 6,847
5 votes
1 answer
3k views

Windows server 2012 R2 - delay before certificates start working

I have this weird unexplained delay before the certificates i put in my servers start actually working it goes something like this: I add the certificates snap-in to mmc to manage the computer ...
user avatar
2 votes
1 answer
193 views

How would one configure an IIS that has SSL and client certs functional, to show a warning page before logon

I have a web site that uses a CAC client certificate, which is functioning like it should. The problem is, there's a requirement that the site regurgitate a message warning that it's a US Government ...
user avatar
4 votes
1 answer
568 views

Smart Card S/MIME with Exchange 2013

I have an Exchange 2013 environment that I'm trying to implement S/MIME with smart cards. To the best of my knowledge, and the little help I have received on TechNet, I have configured my Exchange ...
user avatar
0 votes
2 answers
1k views

Linux smart card authentication

I am using puttysc to authenticate to a remote Linux server with my smart card . But as I understand, this isn't true PKI authentication - puttysc just unlocks the public key and matches it to a user ...
user avatar
  • 1
1 vote
1 answer
3k views

Connecting to Server 2012 R2 using HP ThinPro (freeRDP), but smart card is not reading correctly

In preparation to deploy our new 2012R2 RD farm, we have updated our HP thin clients to ThinPro 5.0. They connect just fine using username/password, but when I try to use a smart card, I get the ...
user avatar
6 votes
3 answers
45k views

Slow logon via Remote Desktop to Server 2012 and Smart Card service errors

When I logon my Server 2012 R2 server via Remote Desktop it sits at the logon screen for 10-20 seconds before logging me in. Once logged in I find the following three errors in the Windows System ...
user avatar
0 votes
0 answers
868 views

Smart Card Logon & next hop SSO RDP Login

I started to expriement with smart card based login. So far I can logon to my local PC using my smart card. What doesn't work is using sso when connecting via RDP to another server. I get the error ...
user avatar
  • 575
1 vote
1 answer
651 views

Require smart cards for connections to Windows 2012 remote access server

We have a Windows 2012 server accepting VPN connections over SSTP and authenticating them using the Network Policy Server feature on the same server. For client authentication we've set it up to ...
user avatar
5 votes
1 answer
2k views

How do I configure AD CS to support Name Constraints (4.2.1.11 in RFC 2459)?

I am trying to figure out how to do Qualified Subordination with the critical extension set, but I'm unable to figure out how to do this in MSFT AD CS. For a given certificate, how do I make sure ...
user avatar
1 vote
0 answers
6k views

KDC Certificate error using smartcard and Remote Desktop

Our Active Directory domain recently enforced smart card logons for administrator accounts. Since this change we have been unable to access some servers (2008 R2) using Remote Desktop. When attempting ...
user avatar
  • 11
1 vote
0 answers
887 views

Windows Server 2008 - Smart Card service is down

I'm getting this weird error when trying to work with a SmartCard on an ec2 machine running Windows Server 2008. I'm using AnywhereUSB to connect my physical smart-card reader to the remote machine. ...
user avatar
  • 111
3 votes
1 answer
88 views

Windows users with smartcards using Lync Android app

We have a Windows network where users are required to log in using a smartcard instead of a password. Is there a way of allowing our users to use the Andoroid/iOS Lync app, even though they don't ...
user avatar
  • 171
2 votes
1 answer
766 views

Web Server with PKCS11 support for server certificates?

I have a PKCS#11-compatible smart card with either a private key, or a combination of a certificate and a private key on it (I can have both). I want to present the certificate from the smart card to ...
user avatar
  • 246
0 votes
0 answers
346 views

Use server-side certificate from Smart Card in IIS

I have a Smart Card (actually a USB dongle, called a Feitian ePass2003) with a certificate and its accompanying private key on it, and I want to use this certificate to serve my SSL site in IIS. To ...
user avatar
  • 246
1 vote
1 answer
2k views

Smartcard Sharepoint Password prompt

I work in an organization that uses smartcard login. Passwords are not be used. When opening an attachment in Sharepoint, we are prompted with a username/password dialog. Clicking cancel will allow ...
user avatar
1 vote
0 answers
224 views

whats the general process for using a smart card in truecrypt?

I'm a little confused with how to deploy truecrypt our environment I purchased a few smartcards (ACOS5) that are supposedly compatible with truecrypt however i'm unable to make it all work due to ...
user avatar
  • 667
3 votes
1 answer
43k views

Revocation status of DC can't be verified

A Domain Controller within my forest was working fine (as the story usually goes). Then, suddenly, I can't logon with my smart card. Instead, I'm greeted with the following message: The system ...
user avatar
  • 211
1 vote
1 answer
1k views

Possible to disable smart card PIN change in Windows 7?

I'm looking for a way to disable the smart card PIN change ability provided with Windows 7's native minidriver. It doesn't allow us to enforce any PIN complexity requirements such that users could ...
user avatar
  • 442
0 votes
1 answer
142 views

Is special software necessary (apart from card reader drivers) to use a smartcard for authentication on websites?

Our company now begins to use SmartCards as the online portal for tax administration that we use requires authentication. I have never before worked with SmartCards. The device drivers are installed ...
user avatar
0 votes
2 answers
917 views

Windows facilities to generate keys and sign certificate signing requests on smart-cards

Does windows Vista/7 provide some sort of generic utilities and facilities to generate a non-exportable RSA/DSA key on a smart-card and sign a CSR from a smart-card? any hints/tips/pointers ...
user avatar
  • 860
2 votes
0 answers
670 views

How to disable Windows Server 2003 terminal server PIN login without losing smart card support?

The users of a Windows Server 2003 terminal server should be able to use their national identity card (a smart card) inside the terminal session. This requires the Remote Desktop Connection's [x] ...
user avatar
  • 1,056