Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [smartcard]

A smartcard is a cryptographic device, an HSM of sorts, that is programmable and may be used for identification, authentication, private key storage, digital signatures, and other security functions.

66 questions
3
votes
1 answer

Windows users with smartcards using Lync Android app

We have a Windows network where users are required to log in using a smartcard instead of a password. Is there a way of allowing our users to use the Andoroid/iOS Lync app, even though they don't have a Windows password?
Meir
  • 171
  • 1
  • 6
3
votes
1 answer

How do you enable a CAC card in Firefox on linux?

I want to enable a Common Access Smart card on CentOS 5.3 x86_64 in Firefox. What is the easiest procedure to do this?
Jay R.
  • 649
  • 1
  • 10
  • 18
3
votes
1 answer

Revocation status of DC can't be verified

A Domain Controller within my forest was working fine (as the story usually goes). Then, suddenly, I can't logon with my smart card. Instead, I'm greeted with the following message: The system could not log you on. The revocation status of the…
Federer
  • 211
  • 2
  • 5
  • 11
2
votes
1 answer

smart card for UAC only

I'm in the process of configuring USB Yubikeys as a smart card for our company so that staff can elevate to an admin account (added to the computer's local administrators group) by simply inserting the key and typing a PIN. If possible I would like…
captcha
  • 578
  • 5
  • 16
2
votes
1 answer

SSH with Yubikey and intermediate host

I'm on macos with a Yubikey. The Yubikey's publickey is added to ServerA and ServerB. I can connect to any server directly from macos with the Yubikey plugged in. Is it possible to SSH to ServerA and from there to ServerB like so: macos -> ServerA…
Nils
  • 23
  • 2
2
votes
1 answer

Smart Card Windows Auth without PIN

Does anyone know of a simple and secure method of logging into a Windows 10 domain PC without having to type ANYTHING? I have remote workstations that I'd like to access using NVIDIA'S Gamestream protocol. The problem is the GeForce streaming…
TheFunk
  • 123
  • 5
2
votes
1 answer

How would one configure an IIS that has SSL and client certs functional, to show a warning page before logon

I have a web site that uses a CAC client certificate, which is functioning like it should. The problem is, there's a requirement that the site regurgitate a message warning that it's a US Government system (etc.), which has to show up BEFORE the…
tjobrien21
  • 21
  • 1
2
votes
1 answer

Web Server with PKCS11 support for server certificates?

I have a PKCS#11-compatible smart card with either a private key, or a combination of a certificate and a private key on it (I can have both). I want to present the certificate from the smart card to visitors, or use a regular certificate file on…
rix0rrr
  • 246
  • 1
  • 4
2
votes
1 answer

Smartcard Sharepoint Password prompt

I work in an organization that uses smartcard login. Passwords are not be used. When opening an attachment in Sharepoint, we are prompted with a username/password dialog. Clicking cancel will allow the document to open. However, we have users…
Mike Christiansen
  • 298
  • 3
  • 10
2
votes
1 answer

How do you use a smartcard to log in to Windows from a linux box?

I'm using CentOS 5.3 and I want to use the Terminal Server Client to remote log in to a WindowsXP machine that uses smartcards exclusively to access the domain accounts. How can I set up the Terminal Server Client to use the coolkey pkcs11 library…
Jay R.
  • 649
  • 1
  • 10
  • 18
2
votes
1 answer

Possible to disable smart card PIN change in Windows 7?

I'm looking for a way to disable the smart card PIN change ability provided with Windows 7's native minidriver. It doesn't allow us to enforce any PIN complexity requirements such that users could change their PIN to 000000 or blank without any…
bobmagoo
  • 452
  • 2
  • 12
2
votes
0 answers

How to disable Windows Server 2003 terminal server PIN login without losing smart card support?

The users of a Windows Server 2003 terminal server should be able to use their national identity card (a smart card) inside the terminal session. This requires the Remote Desktop Connection's [x] Smart Cards checkbox to be checked. Unfortunately…
Henno
  • 1,056
  • 5
  • 19
  • 33
2
votes
1 answer

Is it possible to change a domain controller's GUID?

I have a large number of separate Active Directory domains (~150) consisting of 2 server clusters that I need to setup for smart card login. To do this I will have to request ~300 domain controller certificates manually due to my environment.…
chotchki
  • 149
  • 1
  • 11
2
votes
1 answer

Exporting a PFX file for Smartcard authentication driver issues

I have a ACR122 Smartcard reader I am attempting to export a PFX certificate to for password-less authentication. I have everything set up on the active directory server, but am stuck on the simplest and most frustrating issue: the driver for the…
JimmyP624
  • 23
  • 2
1
vote
1 answer

Openssh and smart card

I'm trying to connect to a remote host using a smart card (the same I use to login on my system). I extracted the rsa key from the smartcard: $ ssh-keygen -D /usr/lib/opensc-pkcs11.so -e ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDJ[...] Then I put it…
Matteo Fabbroni
  • 31
  • 3
1
2
3 4 5