Questions tagged [smartcard]
The smartcard tag has no usage guidance.
59
questions with no upvoted or accepted answers
6
votes
1
answer
6k
views
Outlook 2016 prompting for Smart Card instead of Credentials
My Outlook 2016 (on Windows 10) has always been annoying, prompting me for Domain Credentials for a synced calendar (I think, or some other reason) at least 5 times a day, or whenever I click "Send/...
- 333
4
votes
0
answers
2k
views
Why does Windows Security stop prompting for my smart card credentials (the "more options" is not showing)?
I'm currently in a Windows 10 domain environment that uses smart card authentication. We are using ActivClient 7.1.0.213 for reading the smart cards. I use a user smart card to login as a user (which ...
- 163
4
votes
1
answer
1k
views
Error with GPG Smartcard fetching public subkey
I'm trying to setup an OpenPGP smartcard using a YubiKey.
It's a YubiKey 4, so in theory should accept a 4096 bit secret key, but I'm using 2048 bit subkeys.
I have a master key (set for cert only), ...
- 41
4
votes
0
answers
245
views
How do I stop Windows from flooding smartcard with APDUs
Whenever I put a smartcard in/on my smartcard reader Windows (7 Prof, x64) immediately starts flooding it with APDUs possibly trying to identify the type of the card (SELECT and READ_DATA commands).
...
- 141
3
votes
0
answers
247
views
Can YubiKey PIV and FIDO U2F be used together?
I setup my YubiKey for PIV authentication to my computer, and FIDO U2F for web app authentication. My issue is, whenever something requests FIDO access from my YubiKey, it disconnects the smart card. ...
2
votes
0
answers
1k
views
Why can't I add an elliptic curve certificate (smartcard, Yubikey, piv) as protector to a BitLocker protected partition?
Yubikey as SmartCard
I have been using a SmartCard (Yubikey 4, PIV interface) with RSA certificate to unlock BitLocker protected drives. The certificates are self-signed and generated by the Encrypted ...
- 550
2
votes
0
answers
1k
views
Prevent device from being ejected (Windows 10 Pro)
I have a fixed device (5.25 device), a smartcard reader, that is ejectable and appears in "safe removal".
The problem is that if I misclick this smartcard reader while is about to eject a USB memory, ...
- 1,031
2
votes
0
answers
207
views
3DES_CMAC encryption using online tools or OpenSSL
I have a smart card that claims that its mutual authentication is based on 3DES_CMAC algorithm.
In the first step, the user sends a random number to the card and the card calculate the encrypted ...
- 145
2
votes
0
answers
728
views
Can I read a smartcard in a virtual machine?
My employer requires a smartcard to login to their web-based remote working platform. I want to access this platform by using a Remote Desktop Connection on to my Windows 7 Virtual Machine, with the ...
- 237
2
votes
0
answers
88
views
Windows 8 Login configuration
I have a requirement where I use a smart card to login in Windows 8.
(In windows-7, as was mentioned in SO answers, I know that I can configure smart-card login.)
Or where do I see the login-...
1
vote
0
answers
65
views
OpenSC and Firefox on Windows
I have OpenSC and Firefox on Windows. I need to permanently unload OpenSC module from Firefox as it causes problems. I can unload it from Settings\Privacy & Security\Security\Certificates\Security ...
- 155
1
vote
0
answers
198
views
private key on OpenPGP smardcard
I am using OpenPGP card (ISO/IEC 7816-4, -8) and a class 3 smart card reader (Reiner SCT Cyber Jack RFID komfort).
Following several guides by using gpg --card-edit -> admin -> GENERATE --force -...
- 63
1
vote
0
answers
1k
views
No smart card logon option in Windows 10
I'm not IT trained but I was tasked to implement smart card windows logon for a particular system. The system has a single server (functions as AD and DC) and many client PCs. All the machines are in ...
- 111
1
vote
2
answers
2k
views
firefox - Unable to login via smart card pin on company websites
I'm not able to login via smart card PIN on enterprise websites. This works in other browsers Chrome/Brave/Edge etc.
Secure connection failed
A PKCS #11 module returned CKG_GENERAL_ERROR, indicating ...
- 310
1
vote
1
answer
48
views
Smart Card Reader (CAC) operation - what deauthorizes session?
We are planning to shock test a USB smartcard reader (CAC reader) for a DoD application, and need to know more about what indications to look for. Our only real concern is that the user remains logged ...
1
vote
1
answer
483
views
Disable PIN caching for Virtual Smart Cards
We want to store digital certificates for PDF signing on Virtual Smart Cards. The default behavior for PIN entering is that the PIN is only entered once during a session. Is it possible to change this ...
- 11
1
vote
0
answers
194
views
How can I connect a CentOS Hyper V guest OS to the smartcard reader on my physical machine?
I'm running Windows 10 Pro with Hyper-V Manager 10. On that Hyper-V I'm running a guest CentOS 7 VM.
I'd like an application on that CentOS VM to read a smartcard that's physically inserted into a ...
- 129
1
vote
0
answers
2k
views
Smartcard authentication on CentOS
I tried to implement a smart card authentication in a Samba4 domain (Samba AD).
Currently I have two domain controllers (CentOS), a file server and several clients (CentOS and Windows). In regards to ...
- 11
1
vote
0
answers
6k
views
Windows 10 Logon using smartcard - Missing Driver
I am trying to log in to a domain account using smart card work but was not successful.
I have the following environment setup for the test.
Client Laptop (Lenovo P50)
Windows 10 Fall Creator
...
- 11
1
vote
1
answer
2k
views
Yubikey not detected by gpg-agent and pcsc_scan on LMDE
I have an issue regarding the GPG agent that prevents me from using several commands and particularly the one that enforces the user to touch the key before signing. I am on Debian 8.9 / Linux Mint ...
- 297
1
vote
0
answers
253
views
ActivClient add-on crashes Firefox on Linux
My work requires that I access to websites under the DoD umbrella using a CAC card, with ActivClient as the smartcard middleware. The security device is registered with the help of an add-on called "...
- 113
1
vote
3
answers
5k
views
Smart Card Reader seen, but not the smart card
I have Windows 7 running under VirtualBox. Windows 7 contains an application that requires a smart card to work.
The host system has a smart card reader and under Linux (native OS) I can see both ...
1
vote
0
answers
3k
views
What Blank Smart Card do I need to use to work with my E5570 Laptop?
I have a smart card reader in my new laptop (Dell Latitude E5570) and I wanted to use it for windows login and other authentication processes within Windows 10.
The built-in (It seems to be a module ...
- 11
1
vote
0
answers
2k
views
Cannot enroll smartcard login
I've been tasked with attempting to set up smart cards for login in a test environment, however I'm encountering a very nasty problem.
Upon trying to load a certificate on a factory-new smart card ...
- 701
1
vote
1
answer
187
views
Keypairs are stored securely on HSM. But during a smart card enrollment process, isn't the private key supposed to be injected into the smartcard?
I understand that in a PKI that utilises HSM, the key pairs are securely stored in the HSM. Applications that require encryption/decryption capabilities will communicate with the HSM via APIs.
...
- 11
1
vote
1
answer
105
views
OpenPGP 2.x Smartcard Lifetime?
What's the average lifetime of using an OpenPGP 2.x Smartcard with an USB Reader (Gemalto K30)?
And does the USB (SIM) reader has a significant influence on the smartcards lifetime? (Because the chip ...
- 325
1
vote
0
answers
834
views
Chrome cannot use Virtual Smart Card, IE works fine
In Chrome under Windows 8.1, when logging in to a site that requires a certificate, and trying to use a Virtual Smart Card, I'm getting the message "The security device cannot perform the requested ...
- 153
1
vote
0
answers
1k
views
Virtualbox loses USB connectivity with SmartCard Reader
I'm running VirtualBox inside Ubuntu 13.10 and having issues with USB connection stability.
Guest operating system is Debian 7.0 and the USB device I'm trying to work with is a ACS USB card reader (...
- 363
1
vote
0
answers
417
views
Caching SmartCard PIN in Windows XP
I am installing an application for signing scanned documents with a smart card certificate. The trouble is that the application is asking for the PIN for each document it has to sign, and it is not ...
- 343
1
vote
1
answer
1k
views
Working example of two-factor authentication using smart card and pcsc-lite?
I have a laptop (Dell) with a smart card reader. I'm trying to get it to do two-factor authentication with Linux. Here's the hardware:
$ opensc-tool -n
Using reader with a card: Broadcom 5880 [...
- 8,143
0
votes
0
answers
154
views
How to use OpenPGP smartcard with Avtor CR-371M reader?
I have an OpenPGP card that was setup on a different computer with a different cardreader and is known to work fine for signing emails with GnuPG. Now I am trying to use it on a Windows 10 desktop ...
- 588
0
votes
0
answers
198
views
How to get rid of a smartcard certificate "user" in my Windows 11 login screen?
I installed a smartcard reader and a smartcard certificate used to sign my company's documents in my system. To my surprise, the smartcard certificate became a "user" in my computer's sign-...
0
votes
0
answers
351
views
4096 bit key generation on OpenPGP card
What is the corresponding command to create a 4096 bit RSA key on an OpenPGP card via gpg(2) --card-edit? The documentation just indicates --algo=. I tried RSAwith different values like 3072 and 4096 -...
- 63
0
votes
1
answer
1k
views
Stop smart cards from caching in Edge/Chrome
When you get a certificate drop-down selection prompt in Edge or Chrome, how do you prevent it from showing certificates belonging to previous users?
Certificate issue:
Background - I'm in charge of ...
- 1
0
votes
1
answer
759
views
"Select a smart card device" in an infinite loop instead of asking for a PIN on Windows 11 - how to fix?
Brand new Windows 11 machine, fully up to date.
When trying to access a site using both Edge or Firefox that requires a smartcard, Windows says "select a smart card device" over and over ...
- 581
0
votes
1
answer
393
views
SSH connection with Virtual Smart Card login
I'm using a virtual smart card in order to connect to a Windows remote server via RDP. When I do this it prompts me to insert a PIN, and so I'm done.
The account coupled to this smart card is an admin ...
- 101
0
votes
1
answer
71
views
Use Smartcard for PXE windows install
In our environment we mostly use smartcards for administration tasks in a Windows Domain (tasks such as sensitive NAS shares access, or RDP logons).
Recently, we started using PXE boot to speed up ...
- 137
0
votes
0
answers
426
views
SCardListReaders : Cannot find a smart card reader. (0x8010002E)
My local pc is intel_x86 run on Ubuntu linux
I'm trying to use a smartcard reader that I bought from China. The device is a Zoweetek zw-12026-3. I tried to install the driver from this link https://...
- 13
0
votes
0
answers
145
views
NameConstraints format for UPN values
I'm in the middle of building a new PKI and we are adding name constraints to our issuing CAs with all the usual suspects like DNS, IP, e-mails, directory names etc.
We have a potential smart card ...
- 1
0
votes
0
answers
631
views
RDP + NLA + VPN: Smartcard authentication fails
Inside my company I can login into RDP (NLA is turned on) using my smartcard.
Outside my company I'm not able to login into RDP over VPN using my smartcard when I'm using a non-domain PC. I get the ...
- 365
0
votes
0
answers
649
views
Cannot choose certificate from smart card
I have a smart card that I use to login to and sign documents on governmental websites. The card comes with 2 certificates: one for signing into the websites and another for signing documents on the ...
- 75
0
votes
1
answer
137
views
select command in smart card and status word
I use smart card and I upload different applet on the Smart Card.
Q1:**When I Select one applet with PyApdu.exe and after select another applet without reset connection with card reader **SW=9000 ...
- 1
0
votes
0
answers
138
views
Strong encryption for a local file (PGP)
Just a quick disclaimer: I initially posted this question to Crypto site but was told it was too specific for that site.
I am looking for a safe method to encrypt a local file on my machine. Let's ...
- 125
0
votes
1
answer
597
views
OpenPGP: smart card / device not found on Windows 10
I'm trying to read my new GnuPG V3.3 smart card with OpenPGP on Windows 10, Lenovo keyboard with smart card reader, latest driver installed. When launching from CMD command gpg.exe --card-status ...
- 217
0
votes
1
answer
369
views
SSH permission denied using smartcard authentication
Our institute recently adopted smartcard/chip and PIN logins for all computers on the network. Ever since, I have been unable to log in to any of our Linux network hosts via SSH from my Mac (OSX High ...
- 1
0
votes
1
answer
599
views
Implementing OpenSSH Certificates with smartcards
I want to implement public key authentication with CA and smart card. OpenSSH have their own certificate format, which is not x509.
I have a server (SSHD) and a client. I already made public key ...
Ilay Goldman
0
votes
0
answers
2k
views
USB Smart Card Reader to COM Port
I'm facing the following problem:
I have a software that reads/writes Smart Cards through COM Ports. The Smart Card device that i own is plugged through USB therefore recognised as a usb device with ...
- 1
0
votes
0
answers
740
views
Smart card issue with OpenSC (pklogin_finder debug) only on CentOS
I'm trying to use a smart card on CentOS but I'm stuck. I'm using OpenSC, and I need to implement a special module to use my smart card (libgtop11dotnet).
It doesn't work on CentOS, but I tested on ...
- 11
0
votes
0
answers
3k
views
Enabling Smart Card Readers on Windows 10 Pro?
Windows 10 Professional will not natively allow for using a Smart Card for a sign in option. Does anyone have any ideas on how to enable this, like a 3rd party option, or a group-policy edit, IDK?
It ...
0
votes
0
answers
770
views
Common Access Card (CAC) not working on RHEL 7 with Firefox 59.0.3
I have a Common Access Card and I'd like to use my CAC on my notebook with RHEL 7.4 and FireFox 59.0.3 installed.
I did a yum install on pcsc-lite, pcsc-lite-ccid, pcsc-lite-ccid, and pcsc-tools.
...
- 293