13

How do I configure Windows, so that when I am at the Logon Screen I see the option to logon using a SmartCard? How do I associate the SmartCard with a local user account which is not a member of a domain?

I have a laptop (running Windows 7 Pro), SmartCard & SmartCard reader.

  • I found out a software which is free to download on www.mysmartlogon.com. But it has bugs, crashes all the time. – afelaho Jul 21 '12 at 19:30
  • Related superuser.com/q/951947/191491 – orad Aug 6 '15 at 20:07
6

Windows normally supports smart cards only for domain accounts. However, there is a third-party library, EIDAuthenticate, which lets you use smart cards with local identities.

  • How do I cange the PIN? – user643011 Aug 22 '16 at 21:39
  • Ok, so fo my Gemalto smartcard I had to use a tool called "Minidriver Manager Tool" v2.4.3. There was a web-based management tool as well, but it seems to be taken offline since. – user643011 Aug 22 '16 at 21:44
10

First of all not every smart card can be used for Windows 7 logon. You need a smart card that is supported by Windows 7 or that activates support by installing a certain smart card management component.

The second requirement is that your computer is part of a Windows domain (respectively has an Active Directory and a certificate enrollment center) and the account you want to log-on is a domain account. This is because smart card logon relies on Kerberos logon, which is only available within a domain. Some 3rd party software allows smartcard logon without being in a Domain Active Directory but those solutions are proprietary).

In general the smart card have to contain a certificate and the correspondent private key. The certificate contains the user information used for identifying the user. When logging in using a smart card you enter the PIN of the smart card instead of you regular password.

See also:

1

There seems to be a new option for that - HP ProtectTools Security Manager. It is distributed with new HP business notebooks, so I don't know if it works on any other brands/models. However, in this application, it is possible to control login to Windows using password/fingerprint/smart card/bluetooth device.

I've tested the SmartCard logon on my own machine and it works. However, the program started to accept the SmartCard only after I recorded a Windows File Encryption key onto it (Start->type "file encryption"->Enter).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.