Questions tagged [smartcard]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
18 views

RDP + NLA + VPN: Smartcard authentication fails

Inside my company I can login into RDP (NLA is turned on) using my smartcard. Outside my company I'm not able to login into RDP over VPN using my smartcard when I'm using a non-domain PC. I get the ...
0
votes
1answer
123 views

Smart card reader on Fedora 33 / loading specific driver for usb device

recently we got smart cards and readers to be able to connect to VPN with Cisco AnyConnect. Readers are Identiv SCR3500 A. When plugged in system recognizes this correctly in opensc-tool -l. However ...
1
vote
2answers
272 views

Is it possible to disable PIN entry in Windows 10 when logging in with a Smart Card?

So I have a situation where I would insert a Smart Card into a PCSC Smart Card Reader for the purpose of logging into Windows. The Smart Card contains the certificate and it's not PIN encrypted. ...
1
vote
1answer
518 views

How can I create a “Virtual Smart Card” on my TPM without joining my Windows computer to a Domain?

I want to store a OpenVPN client certificates on our laptops secured by my TPM, so that the certificate can't be stolen/extracted from the laptop even with admin rights. Microsoft offeres "...
1
vote
2answers
21 views

When does a card switch to transmission mode, and can it be done forcefully?

Quoting from EMV Book 1: This contact is used as an input (reception mode) to receive data from the terminal or as an output (transmission mode) to transmit data to the terminal. During operation, ...
0
votes
1answer
37 views

How can I determine when a user logs in to a workstation using a certificate as opposed to a username and password?

We have rolled out smart cards and Yubikeys to most of our users. We need to collect metrics on the usage of these MFA devices. Right now we have custom code that runs on the client that does an OK ...
0
votes
0answers
29 views

Cannot choose certificate from smart card

I have a smart card that I use to login to and sign documents on governmental websites. The card comes with 2 certificates: one for signing into the websites and another for signing documents on the ...
0
votes
1answer
187 views

Mac GPG can't generate smartcard keys

Mac OS X Catalina 10.15.7, Homebrew GPG 2.2.23, brand new Yubikey 5C Nano, homebrew pinentry-mac 0.9.4 % gpg --card-edit Reader ...........: Yubico YubiKey OTP FIDO CCID Application ID ...: ...
1
vote
1answer
17 views

Smart Card Reader (CAC) operation - what deauthorizes session?

We are planning to shock test a USB smartcard reader (CAC reader) for a DoD application, and need to know more about what indications to look for. Our only real concern is that the user remains logged ...
1
vote
1answer
32 views

Basic configuration of OpenSC

I received a Cherry ST-2000 and a Reiner SCT cyberJack RFID smartcard reader and some smartcards. I wanted to learn a bit about how these things work but I seem to fail a basic step. I tried a few ...
1
vote
0answers
448 views

Why can't I add an elliptic curve certificate (smartcard, Yubikey, piv) as protector to a BitLocker protected partition?

Yubikey as SmartCard I have been using a SmartCard (Yubikey 4, PIV interface) with RSA certificate to unlock BitLocker protected drives. The certificates are self-signed and generated by the ...
3
votes
0answers
1k views

Linux: Sign PDF using a certificate stored in a smart card with a time-stamped signature [closed]

In Linux, I am looking for a way to sign a PDF file using a certificate stored in a smart card similar to the feature offered by adobe acrobat reader (Tools->Certificates->Digitally Sign). The latter ...
1
vote
0answers
993 views

Cannot see hardware security token on my Windows PC

I have a SafeNet Token JC device that provides a certificate when I am connecting to a VPN using CheckPoint VPN Client. I'm facing an issue that CheckPoint cannot see that device. I have Windows 10 ...
0
votes
1answer
55 views

select command in smart card and status word

I use smart card and I upload different applet on the Smart Card. Q1:**When I Select one applet with PyApdu.exe and after select another applet without reset connection with card reader **SW=9000 ...
1
vote
1answer
111 views

Preventing Win 10 from automatically installing certificates from smart cards

A short background on the issue. I have a Yubikey 5 with PIV containing 3 personal certificates. One of the certificates is also installed locally on my Win 10 machine. All the certificates contain ...
0
votes
0answers
59 views

Strong encryption for a local file (PGP)

Just a quick disclaimer: I initially posted this question to Crypto site but was told it was too specific for that site. I am looking for a safe method to encrypt a local file on my machine. Let's ...
1
vote
0answers
769 views

Why does Windows Security stop prompting for my smart card credentials (the “more options” is not showing)?

I'm currently in a Windows 10 domain environment that uses smart card authentication. We are using ActivClient 7.1.0.213 for reading the smart cards. I use a user smart card to login as a user (which ...
0
votes
1answer
244 views

How to create a veracrypt volume on the command line not interactively with a keyfile stored on a PKCS#11 token

I am trying to create a new veracrypt container on the command line in a completely interactive fashion. To make things more complicated, I need to store a keyfile on a PKCS#11 token. From what I ...
0
votes
1answer
261 views

OpenPGP: smart card / device not found on Windows 10

I'm trying to read my new GnuPG V3.3 smart card with OpenPGP on Windows 10, Lenovo keyboard with smart card reader, latest driver installed. When launching from CMD command gpg.exe --card-status ...
0
votes
1answer
132 views

SSH permission denied using smartcard authentication

Our institute recently adopted smartcard/chip and PIN logins for all computers on the network. Ever since, I have been unable to log in to any of our Linux network hosts via SSH from my Mac (OSX High ...
0
votes
1answer
226 views

Implementing OpenSSH Certificates with smartcards

I want to implement public key authentication with CA and smart card. OpenSSH have their own certificate format, which is not x509. I have a server (SSHD) and a client. I already made public key ...
0
votes
0answers
1k views

USB Smart Card Reader to COM Port

I'm facing the following problem: I have a software that reads/writes Smart Cards through COM Ports. The Smart Card device that i own is plugged through USB therefore recognised as a usb device with ...
1
vote
1answer
340 views

Disable PIN caching for Virtual Smart Cards

We want to store digital certificates for PDF signing on Virtual Smart Cards. The default behavior for PIN entering is that the PIN is only entered once during a session. Is it possible to change this ...
1
vote
0answers
157 views

How can I connect a CentOS Hyper V guest OS to the smartcard reader on my physical machine?

I'm running Windows 10 Pro with Hyper-V Manager 10. On that Hyper-V I'm running a guest CentOS 7 VM. I'd like an application on that CentOS VM to read a smartcard that's physically inserted into a ...
0
votes
0answers
423 views

Smart card issue with OpenSC (pklogin_finder debug) only on CentOS

I'm trying to use a smart card on CentOS but I'm stuck. I'm using OpenSC, and I need to implement a special module to use my smart card (libgtop11dotnet). It doesn't work on CentOS, but I tested on ...
0
votes
0answers
2k views

Enabling Smart Card Readers on Windows 10 Pro?

Windows 10 Professional will not natively allow for using a Smart Card for a sign in option. Does anyone have any ideas on how to enable this, like a 3rd party option, or a group-policy edit, IDK? It ...
1
vote
0answers
1k views

Smartcard authentication on CentOS

I tried to implement a smart card authentication in a Samba4 domain (Samba AD). Currently I have two domain controllers (CentOS), a file server and several clients (CentOS and Windows). In regards to ...
0
votes
1answer
394 views

Signing a message with a SmartCard / Yubikey

So I've gone through a pretty bog-standard GPG-key-setup process, and then used addtokey to move said keys onto a Yubikey 4. Now, on a fresh setup, I want to try and use those keys, to sign something....
1
vote
2answers
1k views

Firefox shows multiple PIN prompts for smartcard using OpenSC

I installed OpenSC 0.18 and added the PKCS11 DLL as a security device provider in Firefox 61. I can "unlock" my smart card from the Security Devices dialog, and get prompted for the PIN as expected. ...
2
votes
1answer
367 views

Smart card reader ACR 38U-CCID not recognizing blank SLE4442 smart card

I'm attempting to use the OpenSC version 0.18.0 library on my Mac OS High Sierra 10.13.5 to communicate with an ACR38U-I1 reader, connected via USB. Inserting a brand new SLE4428 smart card into the ...
4
votes
1answer
5k views

Smartcard OpenSSH and PuTTY SSH

I am attempting to ssh onto a CentOS 7.5 machine (192.168.1.5) via smart card technology. Now I can SSH using the master slot's x509 certificate with the matching private key to accomplish this, but ...
0
votes
0answers
529 views

Common Access Card (CAC) not working on RHEL 7 with Firefox 59.0.3

I have a Common Access Card and I'd like to use my CAC on my notebook with RHEL 7.4 and FireFox 59.0.3 installed. I did a yum install on pcsc-lite, pcsc-lite-ccid, pcsc-lite-ccid, and pcsc-tools. ...
0
votes
1answer
567 views

ERR_BAD_SSL_CLIENT_AUTH_CERT on RDC with smartcard

I'm trying to use a smartcard/token connected to my local PC on a remote desktop session. The local machine has Windows 10 and the remote machine has Windows Server 2016. I installed IDprotect on ...
1
vote
1answer
2k views

Yubikey 4 not working (Linux & Windows)

I received a Yubikey 4 a few days ago. I got it along a special WIRED Magazine offer. The problem with the key is, that it is not recognized neither by Windows 10, nor by Linux (Mint 18). Linux When ...
0
votes
1answer
482 views

NFC/RFID - Acr122u

So I'm using the Acr122u reader as part of a project implementing Host card emulation on an Android device and need the reader for testing my application. Picture of reader here I assumed at a basic ...
0
votes
0answers
280 views

Smartcard Client SLL Firefox no selection

I'm trying for days now to setup client ssl with apache and firefox using my hsm smartcard. I generated one certificate for every page I'm trying to set up. The smartcard shows up in firefox and ...
3
votes
1answer
4k views

Windows: how to disable scanning of Smart Cards

Under Windows (at least, 8 and 10), when a Smart Card is inserted in a PC/SC Smart Card reader, something in the OS typically issues Select commands (C-APDUs starting in 00 A4) to the Smart Card, as ...
1
vote
0answers
4k views

Windows 10 Logon using smartcard - Missing Driver

I am trying to log in to a domain account using smart card work but was not successful. I have the following environment setup for the test. Client Laptop (Lenovo P50) Windows 10 Fall Creator ...
0
votes
1answer
1k views

Create virtual smart card from physical card

Would it be possible to "clone" a physical smart card into a virtual smart card, by using tpmvscmgr.exe utility? I have several users in our organization that should use the same certificates ...
1
vote
1answer
1k views

Yubikey not detected by gpg-agent and pcsc_scan on LMDE

I have an issue regarding the GPG agent that prevents me from using several commands and particularly the one that enforces the user to touch the key before signing. I am on Debian 8.9 / Linux Mint ...
0
votes
1answer
3k views

Remote Desktop from Window 10 asking for Smart Card service

I'm trying to connect to my work PC using Remote Desktop from my home, Windows 10 PC. I bring up the Remote Desktop dialog, enter the computer name to connect to, and hit Connect, but receive the ...
1
vote
2answers
1k views

Inspecting digital signature in PDF file

I have a PDF that was signed with a certificate from a PKCS#11 module (a Belgian identity card reader, also known as eID) using Adobe Acrobat Reader DC. How can I inspect the signature that's attached ...
3
votes
0answers
195 views

Can YubiKey PIV and FIDO U2F be used together?

I setup my YubiKey for PIV authentication to my computer, and FIDO U2F for web app authentication. My issue is, whenever something requests FIDO access from my YubiKey, it disconnects the smart card. ...
1
vote
0answers
211 views

ActivClient add-on crashes Firefox on Linux

My work requires that I access to websites under the DoD umbrella using a CAC card, with ActivClient as the smartcard middleware. The security device is registered with the help of an add-on called "...
0
votes
1answer
2k views

Athena ID Protect v2 Token triggers Select Card dialog on PKCS#11 C_Login

I am playing around with an Athena IDProtect v2 Token from NXP (the one compatible with the IDProtect Laser product line) on Windows 10 Pro (x64 german). After installing the Athena client middle ...
0
votes
1answer
2k views

Is YubiKey 4 broken on Windows 10 Creators Update? PIV Manager 1.4.2 can't load smart card

I wrote this up on the Yubico Forum already, but thought I might get some more visibility here. If I open YubiKey Piv Manager (1.4.2) then insert my YubiKey 4, everything works great the first time. ...
1
vote
1answer
282 views

gpg2 --edit-key addphoto / keytocard without password prompt

I am trying export subkeys to card for a keyring without any keyboard interaction using the command keytocard. This type of command is the same as addphoto as it requires to edit the keyring with --...
0
votes
1answer
837 views

SmartCard logon - Invalid Signature - on switch user

Little Background: I am replacing some computers in my enterprise environment. We are running Win 7 x64 Enterprise. For our SmartCard readers are are using HID OmniKey 3121. SmartCard logon worked ...
0
votes
1answer
4k views

What does the error message “The smart card is not fully personalized for use” mean?

Cannot upload any key to the smart card, due to the following error message. Changing the pin on smartcard works... The message is seemingly issued by the smartcardcredentialprovider.dll
0
votes
1answer
147 views

How can I detect if a smartcard is still in the keyboard?

We use smart cards in Dell keyboards for authentication at work. Unfortunately they are also the badges that let us into our offices (and other places). Being old, we are constantly forgetting our ...