Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

How do I configure Windows, so that when I am at the logon screen I see the option to logon using a smart card? How do I associate the smartcard with a local user account which is not a memeber of a domain?

I have a laptop (running Windows 7 Pro), smartcard & smartcard reader.

share|improve this question
    
I found out a software which is free to download on www.mysmartlogon.com. But it has bugs, crashes all the time. –  afelaho Jul 21 '12 at 19:30
add comment

2 Answers

up vote 3 down vote accepted

Windows normally supports smart cards only for domain accounts. However, there is a third-party library, EIDAuthenticate, which lets you use smart cards with local identities.

share|improve this answer
add comment

First of all not every smart card can be used for Windows 7 logon. You need a smart card that is supported by Windows 7 or that activates support by installing a certain smart card management component.

The second requirement is that your computer is part of a Windows domain (respectively has an Active Directory and a certificate enrollment center) and the account you want to log-on is a domain account. This is because smart card logon relies on Kerberos logon, which is only available within a domain. Some 3rd party software allows smartcard logon without being in a Domain Active Directory but those solutions are proprietary).

In general the smart card have to contain a certificate and the correspondent private key. The certificate contains the user information used for identifying the user. When logging in using a smart card you enter the PIN of the smart card instead of you regular password.

See also:

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.