Questions tagged [smartcard]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
35 views

GPG stub for encryption subkey not working

I created the classical set of authentication, signature, and encryption subkeys with gpg, then moved them into a smartcard [ledger nano S], which seemed to work fine as I can see the three subkeys: $ ...
user avatar
  • 141
1 vote
2 answers
116 views

How to import OpenPGP Card / YubiKey backup encryption key

When I generate a new OpenPGP key on a YubiKey, it gives me the option to save a copy of the encryption key as a backup like so: $ gpg --edit-card Reader ...........: Yubico Yubikey NEO U2F CCID 00 ...
user avatar
0 votes
0 answers
33 views

NameConstraints format for UPN values

I'm in the middle of building a new PKI and we are adding name constraints to our issuing CAs with all the usual suspects like DNS, IP, e-mails, directory names etc. We have a potential smart card ...
user avatar
  • 1
0 votes
0 answers
204 views

Connection reset in one browser?

I'm trying to help a client to access an internal site that requires smart card authentication. The user got a Windows 10 21H2 computer and if she tries to access it using IE or Firefox it works. But ...
user avatar
0 votes
0 answers
91 views

Windows 10 Sandbox Smart Card Redirection

I'm aware that I can redirect my smart card to an RDP session. But how can I redirect it to the Windows Sandbox?
user avatar
  • 325
1 vote
2 answers
813 views

Windows 10 missing service

I'm trying to use a smart card on my computer and I can't get it to read on one of my computers even though using the exact same reader works on the other. Both are running Windows 10 21H1. Plugging ...
user avatar
  • 385
0 votes
0 answers
279 views

No smart card logon option in Windows 10

I'm not IT trained but I was tasked to implement smart card windows logon for a particular system. The system has a single server (functions as AD and DC) and many client PCs. All the machines are in ...
user avatar
  • 101
0 votes
2 answers
656 views

firefox - Unable to login via smart card pin on company websites

I'm not able to login via smart card PIN on enterprise websites. This works in other browsers Chrome/Brave/Edge etc. Secure connection failed A PKCS #11 module returned CKG_GENERAL_ERROR, indicating ...
user avatar
  • 250
0 votes
0 answers
95 views

RDP + NLA + VPN: Smartcard authentication fails

Inside my company I can login into RDP (NLA is turned on) using my smartcard. Outside my company I'm not able to login into RDP over VPN using my smartcard when I'm using a non-domain PC. I get the ...
user avatar
  • 325
0 votes
1 answer
448 views

Smart card reader on Fedora 33 / loading specific driver for usb device

recently we got smart cards and readers to be able to connect to VPN with Cisco AnyConnect. Readers are Identiv SCR3500 A. When plugged in system recognizes this correctly in opensc-tool -l. However ...
user avatar
  • 1
1 vote
2 answers
780 views

Is it possible to disable PIN entry in Windows 10 when logging in with a Smart Card?

So I have a situation where I would insert a Smart Card into a PCSC Smart Card Reader for the purpose of logging into Windows. The Smart Card contains the certificate and it's not PIN encrypted. ...
user avatar
  • 21
1 vote
1 answer
1k views

How can I create a "Virtual Smart Card" on my TPM without joining my Windows computer to a Domain?

I want to store a OpenVPN client certificates on our laptops secured by my TPM, so that the certificate can't be stolen/extracted from the laptop even with admin rights. Microsoft offeres "...
user avatar
  • 2,289
1 vote
2 answers
26 views

When does a card switch to transmission mode, and can it be done forcefully?

Quoting from EMV Book 1: This contact is used as an input (reception mode) to receive data from the terminal or as an output (transmission mode) to transmit data to the terminal. During operation, ...
user avatar
0 votes
1 answer
42 views

How can I determine when a user logs in to a workstation using a certificate as opposed to a username and password?

We have rolled out smart cards and Yubikeys to most of our users. We need to collect metrics on the usage of these MFA devices. Right now we have custom code that runs on the client that does an OK ...
user avatar
  • 101
0 votes
0 answers
41 views

Cannot choose certificate from smart card

I have a smart card that I use to login to and sign documents on governmental websites. The card comes with 2 certificates: one for signing into the websites and another for signing documents on the ...
user avatar
0 votes
1 answer
310 views

Mac GPG can't generate smartcard keys

Mac OS X Catalina 10.15.7, Homebrew GPG 2.2.23, brand new Yubikey 5C Nano, homebrew pinentry-mac 0.9.4 % gpg --card-edit Reader ...........: Yubico YubiKey OTP FIDO CCID Application ID ...: ...
user avatar
  • 101
1 vote
1 answer
21 views

Smart Card Reader (CAC) operation - what deauthorizes session?

We are planning to shock test a USB smartcard reader (CAC reader) for a DoD application, and need to know more about what indications to look for. Our only real concern is that the user remains logged ...
user avatar
1 vote
1 answer
49 views

Basic configuration of OpenSC

I received a Cherry ST-2000 and a Reiner SCT cyberJack RFID smartcard reader and some smartcards. I wanted to learn a bit about how these things work but I seem to fail a basic step. I tried a few ...
user avatar
1 vote
0 answers
708 views

Why can't I add an elliptic curve certificate (smartcard, Yubikey, piv) as protector to a BitLocker protected partition?

Yubikey as SmartCard I have been using a SmartCard (Yubikey 4, PIV interface) with RSA certificate to unlock BitLocker protected drives. The certificates are self-signed and generated by the Encrypted ...
user avatar
  • 508
5 votes
0 answers
2k views

Linux: Sign PDF using a certificate stored in a smart card with a time-stamped signature [closed]

In Linux, I am looking for a way to sign a PDF file using a certificate stored in a smart card similar to the feature offered by adobe acrobat reader (Tools->Certificates->Digitally Sign). The latter ...
user avatar
  • 51
1 vote
1 answer
3k views

Cannot see hardware security token on my Windows PC

I have a SafeNet Token JC device that provides a certificate when I am connecting to a VPN using CheckPoint VPN Client. I'm facing an issue that CheckPoint cannot see that device. I have Windows 10 ...
user avatar
0 votes
1 answer
67 views

select command in smart card and status word

I use smart card and I upload different applet on the Smart Card. Q1:**When I Select one applet with PyApdu.exe and after select another applet without reset connection with card reader **SW=9000 ...
user avatar
  • 1
1 vote
1 answer
238 views

Preventing Win 10 from automatically installing certificates from smart cards

A short background on the issue. I have a Yubikey 5 with PIV containing 3 personal certificates. One of the certificates is also installed locally on my Win 10 machine. All the certificates contain ...
user avatar
  • 125
0 votes
0 answers
85 views

Strong encryption for a local file (PGP)

Just a quick disclaimer: I initially posted this question to Crypto site but was told it was too specific for that site. I am looking for a safe method to encrypt a local file on my machine. Let's ...
user avatar
  • 125
2 votes
0 answers
931 views

Why does Windows Security stop prompting for my smart card credentials (the "more options" is not showing)?

I'm currently in a Windows 10 domain environment that uses smart card authentication. We are using ActivClient 7.1.0.213 for reading the smart cards. I use a user smart card to login as a user (which ...
user avatar
0 votes
1 answer
295 views

How to create a veracrypt volume on the command line not interactively with a keyfile stored on a PKCS#11 token

I am trying to create a new veracrypt container on the command line in a completely interactive fashion. To make things more complicated, I need to store a keyfile on a PKCS#11 token. From what I ...
user avatar
  • 727
0 votes
1 answer
372 views

OpenPGP: smart card / device not found on Windows 10

I'm trying to read my new GnuPG V3.3 smart card with OpenPGP on Windows 10, Lenovo keyboard with smart card reader, latest driver installed. When launching from CMD command gpg.exe --card-status ...
user avatar
0 votes
1 answer
217 views

SSH permission denied using smartcard authentication

Our institute recently adopted smartcard/chip and PIN logins for all computers on the network. Ever since, I have been unable to log in to any of our Linux network hosts via SSH from my Mac (OSX High ...
user avatar
  • 1
0 votes
1 answer
399 views

Implementing OpenSSH Certificates with smartcards

I want to implement public key authentication with CA and smart card. OpenSSH have their own certificate format, which is not x509. I have a server (SSHD) and a client. I already made public key ...
user avatar
0 votes
0 answers
1k views

USB Smart Card Reader to COM Port

I'm facing the following problem: I have a software that reads/writes Smart Cards through COM Ports. The Smart Card device that i own is plugged through USB therefore recognised as a usb device with ...
user avatar
1 vote
1 answer
368 views

Disable PIN caching for Virtual Smart Cards

We want to store digital certificates for PDF signing on Virtual Smart Cards. The default behavior for PIN entering is that the PIN is only entered once during a session. Is it possible to change this ...
user avatar
1 vote
0 answers
180 views

How can I connect a CentOS Hyper V guest OS to the smartcard reader on my physical machine?

I'm running Windows 10 Pro with Hyper-V Manager 10. On that Hyper-V I'm running a guest CentOS 7 VM. I'd like an application on that CentOS VM to read a smartcard that's physically inserted into a ...
user avatar
  • 129
0 votes
0 answers
533 views

Smart card issue with OpenSC (pklogin_finder debug) only on CentOS

I'm trying to use a smart card on CentOS but I'm stuck. I'm using OpenSC, and I need to implement a special module to use my smart card (libgtop11dotnet). It doesn't work on CentOS, but I tested on ...
user avatar
  • 11
0 votes
0 answers
3k views

Enabling Smart Card Readers on Windows 10 Pro?

Windows 10 Professional will not natively allow for using a Smart Card for a sign in option. Does anyone have any ideas on how to enable this, like a 3rd party option, or a group-policy edit, IDK? It ...
user avatar
1 vote
0 answers
1k views

Smartcard authentication on CentOS

I tried to implement a smart card authentication in a Samba4 domain (Samba AD). Currently I have two domain controllers (CentOS), a file server and several clients (CentOS and Windows). In regards to ...
user avatar
  • 11
0 votes
1 answer
490 views

Signing a message with a SmartCard / Yubikey

So I've gone through a pretty bog-standard GPG-key-setup process, and then used addtokey to move said keys onto a Yubikey 4. Now, on a fresh setup, I want to try and use those keys, to sign something....
user avatar
  • 2,015
1 vote
2 answers
2k views

Firefox shows multiple PIN prompts for smartcard using OpenSC

I installed OpenSC 0.18 and added the PKCS11 DLL as a security device provider in Firefox 61. I can "unlock" my smart card from the Security Devices dialog, and get prompted for the PIN as expected. ...
user avatar
  • 1,478
2 votes
1 answer
421 views

Smart card reader ACR 38U-CCID not recognizing blank SLE4442 smart card

I'm attempting to use the OpenSC version 0.18.0 library on my Mac OS High Sierra 10.13.5 to communicate with an ACR38U-I1 reader, connected via USB. Inserting a brand new SLE4428 smart card into the ...
user avatar
  • 21
4 votes
1 answer
6k views

Smartcard OpenSSH and PuTTY SSH

I am attempting to ssh onto a CentOS 7.5 machine (192.168.1.5) via smart card technology. Now I can SSH using the master slot's x509 certificate with the matching private key to accomplish this, but ...
user avatar
  • 153
0 votes
0 answers
599 views

Common Access Card (CAC) not working on RHEL 7 with Firefox 59.0.3

I have a Common Access Card and I'd like to use my CAC on my notebook with RHEL 7.4 and FireFox 59.0.3 installed. I did a yum install on pcsc-lite, pcsc-lite-ccid, pcsc-lite-ccid, and pcsc-tools. ...
user avatar
  • 253
0 votes
1 answer
681 views

ERR_BAD_SSL_CLIENT_AUTH_CERT on RDC with smartcard

I'm trying to use a smartcard/token connected to my local PC on a remote desktop session. The local machine has Windows 10 and the remote machine has Windows Server 2016. I installed IDprotect on ...
user avatar
1 vote
1 answer
2k views

Yubikey 4 not working (Linux & Windows)

I received a Yubikey 4 a few days ago. I got it along a special WIRED Magazine offer. The problem with the key is, that it is not recognized neither by Windows 10, nor by Linux (Mint 18). Linux When ...
user avatar
  • 275
0 votes
1 answer
536 views

NFC/RFID - Acr122u

So I'm using the Acr122u reader as part of a project implementing Host card emulation on an Android device and need the reader for testing my application. Picture of reader here I assumed at a basic ...
user avatar
0 votes
0 answers
296 views

Smartcard Client SLL Firefox no selection

I'm trying for days now to setup client ssl with apache and firefox using my hsm smartcard. I generated one certificate for every page I'm trying to set up. The smartcard shows up in firefox and ...
user avatar
  • 13
3 votes
1 answer
5k views

Windows: how to disable scanning of Smart Cards

Under Windows (at least, 8 and 10), when a Smart Card is inserted in a PC/SC Smart Card reader, something in the OS typically issues Select commands (C-APDUs starting in 00 A4) to the Smart Card, as ...
user avatar
  • 756
1 vote
0 answers
5k views

Windows 10 Logon using smartcard - Missing Driver

I am trying to log in to a domain account using smart card work but was not successful. I have the following environment setup for the test. Client Laptop (Lenovo P50) Windows 10 Fall Creator ...
user avatar
  • 11
0 votes
2 answers
1k views

Create virtual smart card from physical card

Would it be possible to "clone" a physical smart card into a virtual smart card, by using tpmvscmgr.exe utility? I have several users in our organization that should use the same certificates ...
user avatar
  • 101
1 vote
1 answer
1k views

Yubikey not detected by gpg-agent and pcsc_scan on LMDE

I have an issue regarding the GPG agent that prevents me from using several commands and particularly the one that enforces the user to touch the key before signing. I am on Debian 8.9 / Linux Mint ...
user avatar
0 votes
1 answer
3k views

Remote Desktop from Window 10 asking for Smart Card service

I'm trying to connect to my work PC using Remote Desktop from my home, Windows 10 PC. I bring up the Remote Desktop dialog, enter the computer name to connect to, and hit Connect, but receive the ...
user avatar
  • 253
1 vote
2 answers
1k views

Inspecting digital signature in PDF file

I have a PDF that was signed with a certificate from a PKCS#11 module (a Belgian identity card reader, also known as eID) using Adobe Acrobat Reader DC. How can I inspect the signature that's attached ...
user avatar
  • 756