Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [smartcard]

A smartcard is a cryptographic device, an HSM of sorts, that is programmable and may be used for identification, authentication, private key storage, digital signatures, and other security functions.

66 questions
1
vote
1 answer

How do I get my server HSM working while connected via RDP? (Win 2019)

The error I get from pkcs11-tool.exe is "No slots." My server has a hardware security module (Nitrokey HSM 2) that becomes inaccessible once I connect to my server via Windows Remote Desktop. Note: this is NOT for logging in with smart cards. I use…
Jacob Bruinsma
  • 173
  • 1
  • 7
0
votes
0 answers

Prevent Smart Card prompt when looking for Enrollment Certificate

I'm using an Enrollment Agent user certificate to amend CSRs (in order to add SANs) My method is working fine - using the following command: certreq -config "CertAuth" -policy "PathtoCSR" "Path to SanDetails.inf" "NewCSROutputPath" But when I…
Scepticalist
  • 131
  • 1
  • 8
0
votes
1 answer

How to view signatures fulfilling the "Authroized Signatures" option in a Smart Card Logon certificate from a Windows CA

I'm playing with the Windows Server CA role and Smart Card logons. We have a working PKI setup and smart card issuance/logon working. What I'm curious about is the "Require this number of authorized signatures" option in the "Smartcard Logon…
Nicholas Dechert
  • 35
  • 1
  • 1
  • 9
0
votes
1 answer

Office365 with AD FS Without Azure AD

This should be a simple question, but Microsoft's documentation isn't completely clear on the matter. I may have a job coming up where I'll be setting up a new Windows Server 2016 Standard deployment for an SMB (around 10-15 AD / O365 accounts, but…
Christopher Hammond
  • 1
  • 1
0
votes
1 answer

Windows Shared User Accounts with smart cards

I'm looking for a way to use smart cards to lock and unlock windows workstations used by shared user accounts. 1) We want to lock/unlock the shared user account with each user's personal staff card. 2) in specific areas we want to lock the…
AL3
  • 23
  • 5
0
votes
1 answer

pkcs11_lib - NSS Initialize Failed (bad database?)

I'm having trouble getting PKCS#11 and PAM to work, for whatever reason nss has stopped working and I can't create a new database. Here's the output from PKCS11 and NSS: DEBUG:pkcs11_lib.c:187: Initializing NSS ... DEBUG:pkcs11_lib.c:197:…
Torxed
  • 225
  • 1
  • 5
  • 18
0
votes
2 answers

Linux smart card authentication

I am using puttysc to authenticate to a remote Linux server with my smart card . But as I understand, this isn't true PKI authentication - puttysc just unlocks the public key and matches it to a user account on the Linux server. Is there a way…
ring0
  • 1
  • 1
0
votes
0 answers

Smart Card Logon & next hop SSO RDP Login

I started to expriement with smart card based login. So far I can logon to my local PC using my smart card. What doesn't work is using sso when connecting via RDP to another server. I get the error message "Der Anmeldeversuch ist fehlgeschlagen"…
Jonathan
  • 575
  • 1
  • 7
  • 18
0
votes
0 answers

Use server-side certificate from Smart Card in IIS

I have a Smart Card (actually a USB dongle, called a Feitian ePass2003) with a certificate and its accompanying private key on it, and I want to use this certificate to serve my SSL site in IIS. To me, this seems like a good idea, because I am…
rix0rrr
  • 246
  • 1
  • 4
0
votes
1 answer

Is special software necessary (apart from card reader drivers) to use a smartcard for authentication on websites?

Our company now begins to use SmartCards as the online portal for tax administration that we use requires authentication. I have never before worked with SmartCards. The device drivers are installed properly. The diagnostic tool that was included…
LumenAlbum
  • 527
  • 2
  • 5
  • 15
0
votes
2 answers

Windows facilities to generate keys and sign certificate signing requests on smart-cards

Does windows Vista/7 provide some sort of generic utilities and facilities to generate a non-exportable RSA/DSA key on a smart-card and sign a CSR from a smart-card? any hints/tips/pointers appreciated. P.S. I know about the PKCS15 as provided by…
Konrads
  • 870
  • 2
  • 20
  • 40
0
votes
1 answer

Smartcard (USB Cryptostick) and Firefox

I am having a GPF-Cryptostick running on ubuntu 11.04 with firefox 5.0. Using a smartcard is such a great thing, but i did not found any good how-tos. Maybe it is just a lack of understanding. First: My Cryptostick (Smartcard) works fine. I am using…
Janning
  • 1,421
  • 2
  • 21
  • 38
0
votes
1 answer

How to disable smart card logon on windows server 2003 domain for one user

I have CA on the same server (windows 2003) as my second domain server. I created certificate for my user In Administrative Tools->Active Directory Users and Computers->(My user)->Account tab->Account Options I've checked "Smart card is required…
SeeR
  • 739
  • 6
  • 10
0
votes
1 answer

"Signing in with a smart card isn't supported for your account"

We ran into an issue today where suddenly none of our users could log into their workstations using Smart Cards. The error occurred with a fresh logon or after a 'switch user' but not when logging on after locking the workstation. Users were able to…
duct_tape_coder
  • 826
  • 4
  • 13
0
votes
0 answers

How to set file permissions if user logged on using Smart Card or Windows Hello for Business

I have a hybrid joined Windows domain and have set up log-on with Smart Cards and Windows Hello for business. I would like to be able to set file server permissions based on whether a user logged on with the smart card or not. Based on very limited…
Andy Haer
  • 11
  • 1
1 2 3
4
5