Questions tagged [smartcard]
The smartcard tag has no usage guidance.
132
questions
0
votes
0
answers
84
views
How to use OpenPGP smartcard with Avtor CR-371M reader?
I have an OpenPGP card that was setup on a different computer with a different cardreader and is known to work fine for signing emails with GnuPG. Now I am trying to use it on a Windows 10 desktop ...
- 588
0
votes
1
answer
57
views
RDP/NLA/CAC Smartcard authentication fails
I am able to RDP into VMs through username and password, but not with CAC. I receive the error "The remote computer that you are trying to connect to requires NLA, but your Windows domain ...
0
votes
0
answers
46
views
How to get rid of a smartcard certificate "user" in my Windows 11 login screen?
I installed a smartcard reader and a smartcard certificate used to sign my company's documents in my system. To my surprise, the smartcard certificate became a "user" in my computer's sign-...
0
votes
0
answers
79
views
4096 bit key generation on OpenPGP card
What is the corresponding command to create a 4096 bit RSA key on an OpenPGP card via gpg(2) --card-edit? The documentation just indicates --algo=. I tried RSAwith different values like 3072 and 4096 -...
- 63
0
votes
1
answer
237
views
Stop smart cards from caching in Edge/Chrome
When you get a certificate drop-down selection prompt in Edge or Chrome, how do you prevent it from showing certificates belonging to previous users?
Certificate issue:
Background - I'm in charge of ...
- 1
1
vote
0
answers
82
views
private key on OpenPGP smardcard
I am using OpenPGP card (ISO/IEC 7816-4, -8) and a class 3 smart card reader (Reiner SCT Cyber Jack RFID komfort).
Following several guides by using gpg --card-edit -> admin -> GENERATE --force -...
- 63
0
votes
1
answer
202
views
"Select a smart card device" in an infinite loop instead of asking for a PIN on Windows 11 - how to fix?
Brand new Windows 11 machine, fully up to date.
When trying to access a site using both Edge or Firefox that requires a smartcard, Windows says "select a smart card device" over and over ...
- 562
0
votes
1
answer
229
views
SSH connection with Virtual Smart Card login
I'm using a virtual smart card in order to connect to a Windows remote server via RDP. When I do this it prompts me to insert a PIN, and so I'm done.
The account coupled to this smart card is an admin ...
- 101
0
votes
1
answer
44
views
Use Smartcard for PXE windows install
In our environment we mostly use smartcards for administration tasks in a Windows Domain (tasks such as sensitive NAS shares access, or RDP logons).
Recently, we started using PXE boot to speed up ...
- 137
0
votes
0
answers
272
views
SCardListReaders : Cannot find a smart card reader. (0x8010002E)
My local pc is intel_x86 run on Ubuntu linux
I'm trying to use a smartcard reader that I bought from China. The device is a Zoweetek zw-12026-3. I tried to install the driver from this link https://...
- 13
0
votes
0
answers
445
views
Difficulties using smart card login on Windows 10 joined machine with Azure AD
I got trouble signing in on Windows login using the virtual smart card as login.
The login works perfectly on the web, so CertAuth is correctly configured. I got the following machines for tests:
...
- 101
0
votes
0
answers
47
views
How to Logon centos 8 using Smart Card + PIN (stand alone PC)
I have a USB Smart Card Reader (idbridge ct30) and a Smart Card (for authentication with PIN). So I was wondering if I can associate this card to my centos Administrator profile (local user account) ...
- 1
1
vote
1
answer
240
views
GPG stub for encryption subkey not working
I created the classical set of authentication, signature, and encryption subkeys with gpg, then moved them into a smartcard [ledger nano S], which seemed to work fine as I can see the three subkeys:
$ ...
- 141
2
votes
2
answers
1k
views
How to import OpenPGP Card / YubiKey backup encryption key
When I generate a new OpenPGP key on a YubiKey, it gives me the option to save a copy of the encryption key as a backup like so:
$ gpg --edit-card
Reader ...........: Yubico Yubikey NEO U2F CCID 00 ...
- 123
0
votes
0
answers
77
views
NameConstraints format for UPN values
I'm in the middle of building a new PKI and we are adding name constraints to our issuing CAs with all the usual suspects like DNS, IP, e-mails, directory names etc.
We have a potential smart card ...
- 1
1
vote
2
answers
2k
views
Windows 10 missing service
I'm trying to use a smart card on my computer and I can't get it to read on one of my computers even though using the exact same reader works on the other. Both are running Windows 10 21H1. Plugging ...
- 445
1
vote
0
answers
887
views
No smart card logon option in Windows 10
I'm not IT trained but I was tasked to implement smart card windows logon for a particular system. The system has a single server (functions as AD and DC) and many client PCs. All the machines are in ...
- 111
0
votes
2
answers
2k
views
firefox - Unable to login via smart card pin on company websites
I'm not able to login via smart card PIN on enterprise websites. This works in other browsers Chrome/Brave/Edge etc.
Secure connection failed
A PKCS #11 module returned CKG_GENERAL_ERROR, indicating ...
- 260
0
votes
0
answers
481
views
RDP + NLA + VPN: Smartcard authentication fails
Inside my company I can login into RDP (NLA is turned on) using my smartcard.
Outside my company I'm not able to login into RDP over VPN using my smartcard when I'm using a non-domain PC. I get the ...
- 345
0
votes
1
answer
843
views
Smart card reader on Fedora 33 / loading specific driver for usb device
recently we got smart cards and readers to be able to connect to VPN with Cisco AnyConnect. Readers are Identiv SCR3500 A. When plugged in system recognizes this correctly in opensc-tool -l. However ...
- 1
1
vote
2
answers
2k
views
Is it possible to disable PIN entry in Windows 10 when logging in with a Smart Card?
So I have a situation where I would insert a Smart Card into a PCSC Smart Card Reader for the purpose of logging into Windows. The Smart Card contains the certificate and it's not PIN encrypted. ...
- 19
4
votes
1
answer
3k
views
How can I create a "Virtual Smart Card" on my TPM without joining my Windows computer to a Domain?
I want to store a OpenVPN client certificates on our laptops secured by my TPM, so that the certificate can't be stolen/extracted from the laptop even with admin rights.
Microsoft offeres "...
- 2,518
1
vote
2
answers
33
views
When does a card switch to transmission mode, and can it be done forcefully?
Quoting from EMV Book 1:
This contact is used as an input (reception mode) to receive data from the terminal or as an output (transmission mode) to transmit data to the terminal. During operation, ...
OrangeJusticeV
0
votes
1
answer
62
views
How can I determine when a user logs in to a workstation using a certificate as opposed to a username and password?
We have rolled out smart cards and Yubikeys to most of our users. We need to collect metrics on the usage of these MFA devices. Right now we have custom code that runs on the client that does an OK ...
- 101
0
votes
0
answers
392
views
Cannot choose certificate from smart card
I have a smart card that I use to login to and sign documents on governmental websites. The card comes with 2 certificates: one for signing into the websites and another for signing documents on the ...
- 75
0
votes
1
answer
428
views
Mac GPG can't generate smartcard keys
Mac OS X Catalina 10.15.7, Homebrew GPG 2.2.23, brand new Yubikey 5C Nano, homebrew pinentry-mac 0.9.4
% gpg --card-edit
Reader ...........: Yubico YubiKey OTP FIDO CCID
Application ID ...: ...
- 101
1
vote
1
answer
34
views
Smart Card Reader (CAC) operation - what deauthorizes session?
We are planning to shock test a USB smartcard reader (CAC reader) for a DoD application, and need to know more about what indications to look for. Our only real concern is that the user remains logged ...
1
vote
1
answer
115
views
Basic configuration of OpenSC
I received a Cherry ST-2000 and a Reiner SCT cyberJack RFID smartcard reader and some smartcards. I wanted to learn a bit about how these things work but I seem to fail a basic step. I tried a few ...
- 76
2
votes
0
answers
1k
views
Why can't I add an elliptic curve certificate (smartcard, Yubikey, piv) as protector to a BitLocker protected partition?
Yubikey as SmartCard
I have been using a SmartCard (Yubikey 4, PIV interface) with RSA certificate to unlock BitLocker protected drives. The certificates are self-signed and generated by the Encrypted ...
- 530
6
votes
0
answers
3k
views
Linux: Sign PDF using a certificate stored in a smart card with a time-stamped signature [closed]
In Linux, I am looking for a way to sign a PDF file using a certificate stored in a smart card similar to the feature offered by adobe acrobat reader (Tools->Certificates->Digitally Sign). The latter ...
- 61
1
vote
1
answer
5k
views
Cannot see hardware security token on my Windows PC
I have a SafeNet Token JC device that provides a certificate when I am connecting to a VPN using CheckPoint VPN Client.
I'm facing an issue that CheckPoint cannot see that device. I have Windows 10 ...
- 111
0
votes
1
answer
115
views
select command in smart card and status word
I use smart card and I upload different applet on the Smart Card.
Q1:**When I Select one applet with PyApdu.exe and after select another applet without reset connection with card reader **SW=9000 ...
- 1
1
vote
1
answer
485
views
Preventing Win 10 from automatically installing certificates from smart cards
A short background on the issue. I have a Yubikey 5 with PIV containing 3 personal certificates. One of the certificates is also installed locally on my Win 10 machine. All the certificates contain ...
- 125
0
votes
0
answers
114
views
Strong encryption for a local file (PGP)
Just a quick disclaimer: I initially posted this question to Crypto site but was told it was too specific for that site.
I am looking for a safe method to encrypt a local file on my machine. Let's ...
- 125
4
votes
0
answers
1k
views
Why does Windows Security stop prompting for my smart card credentials (the "more options" is not showing)?
I'm currently in a Windows 10 domain environment that uses smart card authentication. We are using ActivClient 7.1.0.213 for reading the smart cards. I use a user smart card to login as a user (which ...
- 163
1
vote
1
answer
402
views
How to create a veracrypt volume on the command line not interactively with a keyfile stored on a PKCS#11 token
I am trying to create a new veracrypt container on the command line in a completely interactive fashion. To make things more complicated, I need to store a keyfile on a PKCS#11 token.
From what I ...
- 826
0
votes
1
answer
532
views
OpenPGP: smart card / device not found on Windows 10
I'm trying to read my new GnuPG V3.3 smart card with OpenPGP on Windows 10, Lenovo keyboard with smart card reader, latest driver installed. When launching from CMD command gpg.exe --card-status ...
- 207
0
votes
1
answer
322
views
SSH permission denied using smartcard authentication
Our institute recently adopted smartcard/chip and PIN logins for all computers on the network. Ever since, I have been unable to log in to any of our Linux network hosts via SSH from my Mac (OSX High ...
- 1
0
votes
1
answer
506
views
Implementing OpenSSH Certificates with smartcards
I want to implement public key authentication with CA and smart card. OpenSSH have their own certificate format, which is not x509.
I have a server (SSHD) and a client. I already made public key ...
Ilay Goldman
0
votes
0
answers
2k
views
USB Smart Card Reader to COM Port
I'm facing the following problem:
I have a software that reads/writes Smart Cards through COM Ports. The Smart Card device that i own is plugged through USB therefore recognised as a usb device with ...
- 1
1
vote
1
answer
426
views
Disable PIN caching for Virtual Smart Cards
We want to store digital certificates for PDF signing on Virtual Smart Cards. The default behavior for PIN entering is that the PIN is only entered once during a session. Is it possible to change this ...
- 11
1
vote
0
answers
189
views
How can I connect a CentOS Hyper V guest OS to the smartcard reader on my physical machine?
I'm running Windows 10 Pro with Hyper-V Manager 10. On that Hyper-V I'm running a guest CentOS 7 VM.
I'd like an application on that CentOS VM to read a smartcard that's physically inserted into a ...
- 129
0
votes
0
answers
677
views
Smart card issue with OpenSC (pklogin_finder debug) only on CentOS
I'm trying to use a smart card on CentOS but I'm stuck. I'm using OpenSC, and I need to implement a special module to use my smart card (libgtop11dotnet).
It doesn't work on CentOS, but I tested on ...
- 11
0
votes
0
answers
3k
views
Enabling Smart Card Readers on Windows 10 Pro?
Windows 10 Professional will not natively allow for using a Smart Card for a sign in option. Does anyone have any ideas on how to enable this, like a 3rd party option, or a group-policy edit, IDK?
It ...
1
vote
0
answers
2k
views
Smartcard authentication on CentOS
I tried to implement a smart card authentication in a Samba4 domain (Samba AD).
Currently I have two domain controllers (CentOS), a file server and several clients (CentOS and Windows). In regards to ...
- 11
0
votes
1
answer
613
views
Signing a message with a SmartCard / Yubikey
So I've gone through a pretty bog-standard GPG-key-setup process, and then used addtokey to move said keys onto a Yubikey 4.
Now, on a fresh setup, I want to try and use those keys, to sign something....
- 2,325
2
votes
2
answers
2k
views
Firefox shows multiple PIN prompts for smartcard using OpenSC
I installed OpenSC 0.18 and added the PKCS11 DLL as a security device provider in Firefox 61. I can "unlock" my smart card from the Security Devices dialog, and get prompted for the PIN as expected. ...
- 1,578
3
votes
1
answer
512
views
Smart card reader ACR 38U-CCID not recognizing blank SLE4442 smart card
I'm attempting to use the OpenSC version 0.18.0 library on my Mac OS High Sierra 10.13.5 to communicate with an ACR38U-I1 reader, connected via USB.
Inserting a brand new SLE4428 smart card into the ...
- 41
4
votes
1
answer
8k
views
Smartcard OpenSSH and PuTTY SSH
I am attempting to ssh onto a CentOS 7.5 machine (192.168.1.5) via smart card technology.
Now I can SSH using the master slot's x509 certificate with the matching private key to accomplish this, but ...
- 153
0
votes
0
answers
695
views
Common Access Card (CAC) not working on RHEL 7 with Firefox 59.0.3
I have a Common Access Card and I'd like to use my CAC on my notebook with RHEL 7.4 and FireFox 59.0.3 installed.
I did a yum install on pcsc-lite, pcsc-lite-ccid, pcsc-lite-ccid, and pcsc-tools.
...
- 283