Only smart card authentication

Similar Questions

• BlackBerry curve 8520 locked to smart card authentication. The phone says PIN does not and is not true.

  Hi all
  I have a big problem. I'm testing my smart card pilot in a BB 8520 curve. If someone wants to work with the BlackBerry Smart Card Reader and smart card a not suported must implement a smart card driver. And wthat I did.

  Everything works fine until it played some erroneous password settings results in the block of the card, and obviously I can not unlock the phone. I have

  The problem is that, although I've unlocked the map etc now the phone still saying that the pin code of the card is wrong. I'm sure I'm in the well axis and the problem is not on the driver code. It's as if the phone has been collapsed and always says that the spindle is bad.

  I tried many things and nothing works. I reset the phone, I deleted all the data, I reinstalled the software, everything, but I still get the locked phone.

  I guess this could solve by modifying the COMPUTER policies for passwords or something like that. I don't know, I'm not just a BlackBerry user. I only do it for work.

  I'm desperate. Could someone help me? Any value idea for me. I have a backup of everything, so I don't worry about what was the solution.

  If you think that you should put this post in another part, please let me know.

  Is attached a picture to show exactly what is happening to me. The DIF is on the PIN to the chip card. The other password its ok.

  

  Thank you.

  OK, I solved the problem.

  I made a backbup, then I did a factory reset password bad presentation 10 times, and I have restored the backup.

  I know that he's not a nice solution, but in my case was salvation!

• Smart card authentication does not

  I am currently configuring a deployment view in our environment.  Installation requires that we use smart cards to connect (Aladdin eToken Pro).  I have the aladdin software installed on the client computer.  When I run the client to view I don't get invited to my PIN and instead get a message indicating that this smart card is required for the connection.

  Smart card for my domain authentication is working because I need a smart card to connect to our current physical machines.

  Has anyone had an experience getting the aladdin etokens to work?

  Thank you

  Casey Shenberger

  It's really weird.  I don't expect this step to get this part working, but I guess stranger things have occurred.

  In general, the answer to your question is to set the GPO of Agent 'AllowSingleSignOn' to false/stop.  Then the SSO will not be attempted in remote desktop.  If, as you say, you don't want users to have access to the smart card reader in the remote desktop connection or for use with applications, the next step depends on the Protocol.  If the end users use PCoIP, then it seems that you do not want to install the Sub-function "PCoIP Smart Card" of the agent Installer and devices will not be redirected.  If end users use RDP, then use one of the client group policy to turn off the smart card redirection.  In my view, there is also a PCoIP GPO to do the same thing (or he respects the GPO of RDP, offhand, I don't remember that one).

• Possible bug in Anyconnect with smart card on linux

  Hello

  I got the authentication of smart card Anyconnect connecting Linux using NetId customers.

  My problem is that this only works at first starting a client anyconnect.

  I can do connect/reconnect whenever I want to, but if I left the anyconnect client and restart smart card authentication not working anymore.

  I've nailed sort of problem until beeing associated with the user profile for anyconnect beeing created (including the seams to read at the start of the customer).

  ~/. AnyConnect

  Still further the specific problem with the item seams

  If I delete this specific element of the profile or completely delete the profile, and then restart the client, smart card authentication will work.

  Newspapers anyconnect not sewing to shed light on the problem.

  Print written in the profile is always the same.

  Hope that is understandable and someone could give an explanation to this.

  Do not hesitate to ask if something is not clear or you would like more information.

  Best regards

  / Mattias

  Mattias,

  Please understand that these issues are all new to us.  We had not seen before two cases I know has opened in the same week as yours.  If you wish to pursue a fix, beyond the solution of effective workaround for this add-in, open that a TAC is necessary so that we can collect the details and file another bug.  Please be sure to include in your case, notes of the opening so that the TAC engineer who gets it may be noted that workaround.

  -Craig

• Connection of vSphere web customer smart card

  Smart card logon can be enabled on the web client of Vsphere?  I use 5.5

  I've looked everywhere and cannot find any info.

  Thank you

  The only option for smart card that my knowledge is that which is supposed to come with vSphere 6.0. It is however for US Federal customers only. (see http://www.vmware.com/files/pdf/vsphere/VMware-vSphere-Platform-Whats-New.pdf)

  in the document:

  DCUI smart card authentication

  This feature is for US Federal customers only. It allows access of DCUI connection using a common access card (CAC) and verification of personal identity (VIP). An ESXi host must belong to an Active Directory domain.

  André

• Remote graphics software: Support for smart card for the RGS

  Hello community!

  Read the manual of RGS 7.2, the section on smart card authentication implies that the functionality is restricted to the receivers of Windows. Should the sender also be a Windows system? For example, you could use a receiver of Windows with a smart card reader to transmit this information to a sender of Linux supported?

  Thank you!

  Smart cards are not supported on shippers Linux at this time.

• Smart card reader driver is sought on Windows update after inserting the smart card

  We are in the process of deploying PKI project in our environment. Client computers have Windows 7 Enterprise 64-bit SP1. We use McAfee Endpoint Encryption 5.2.12 on all clients. Our environment has a mix of Dell (Latitude E6400, E4300, E4310, E6410, E6420) and HP (EliteBook 8460p, EliteBook 2560p) laptops. There's no problem with Dell laptops at all.

  With HP machines, however there are two problems.

  1. with the model 8460p, after installing the Alcor card reader driver, when I insert the smart card into the reader he begins to search for the drivers on windows update. In three minutes, it updates the drivers and works very well. My concern is when I install the card reader drivers explicitly why go to Windows update. HP 2560p also has the same card reader, but this problem is not on this model. I disabled the driver smart card research in strategy group as well. This behaviour is sparkle roll.

  2. when I enable smart card authentication on the McAfee console for any HP laptop and try to use my smart card on McAfee Endpoint encryption pre boot screen, machine freezes. Same configuration of McAfee encryption works fine on Dell laptops.

  Help, please.

  Hello

  Your question of Windows 7 is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT audience Pro on Microsoft TechNet. Please post your question in the TechNet forum. You can follow the link to your question:

  http://social.technet.Microsoft.com/forums/en-us/w7itprogeneral/threads

  Hope the above information is helpful.

• See 5.1.2 problem with smart cards - reader to not see Office.

  Hi all

  We try to roll an office linked Clone pool that is used by our service accounts and as such, they need to be able to use for banking smart cards. We have installed all the necessary software on the machine of model (GemSafe Gemalto) and also one of our Thin Clients (Wyse V10L or C10LE) connected to the model directly via RDP with the card reader chip attached to ensure that different drivers installed correctly and all is well, the virtual machine is able to see the smart card reader.

  The problem comes when spread us these machines up to the pool, the smart card reader is not detected at all. We tried to connect from the Client light view or via RDP directly to one of the linked Clone desktops and both meet the same problem, that is, the drive is not seen at all. If we plug/unplug the drive of the Wyse terminal we see it be detected in the log of the events on the Client itself.

  Can what tools or newspapers we use side view or VMware to solve this problem?

  To confirm, in the settings to connect to the server by smart card authentication is set to optional. In Global political USB access is set to allowed.

  If need more information please ask and I will be happy to provide it.

  Thanks in advance.

  Right, we got to the bottom of it... and I am kicking myself!

  There is a GPO side configuration of the active computer. Administrative Templates/Windows components/Remote Desktop Services / Remote Desktop Session Host / Device and resource Redirection - do not allow redirection of card device chip.

  GRRRR!

• View 4.5 and the smart card configuration

  Hi all

  I encountered a problem which I hope one of you can help me with.

  I install a new server connection view, v4.5 on Windows Server 2008 and everything works fine. I can browse to display administrator connect to a virtual computer by using view Client and also with a thin client. So all is well.

  The problem comes when I try to configure smart card authentication. I created a locked.properties like the documentation file, placed in the install_directory\VMware\VMware View\Server\sslgateway\conf\locked.properties has the status of docs, restart the service and now nothing. Cannot browse to the administrator of the display, unable to connect with View Client or thin client. I tried to start and stop ALL services on the machine vMware, restarted the machine and still nothing.

  I deleted the locked.properties file, rebooted the machine, nothing. If I uninstall and reinstall see connection to the server, everything is fine, but as soon as I add in locked.properties, all works again.

  The content of my locked.properties is:

  trustKeyfile = mystore.key

  trustStoretype = JKS

  useCertAuth = true

  The key file, mystore.key, was obtained using the keytool utility and copied in install_directory\VMware\VMware View\Server\sslgateway\conf, as the docs state.

  I'm just ideas on how to solve this problem.

  Sounds like something in your trust store causes a problem when you start the Secure Gateway service.

  When you started your broker with the locked.properties in place, the service "VMware View security component of gateway" stops shortly after startup? There may be an exception in the newspapers of debugging describing such a problem, near a line similar to:

  2010-12-01 14:38:03, INFO 199 generating managers trust for authentication of the client

• VMWare View fails with windows 7 ultimate 64 bit and smart card

  I have two PC's are both 64-bit Windows 7 Ultimate machines.  My laptop connects to my work PC, but my office will not.  He is aware of my smart card, but when I try and connect it fails saying "failed to connect to server to connect to view. Smart card or certificate authentication is required. "Anyone else had a problem like this?

  See http://blogs.vmware.com/view/2010/10/troubleshooting-smart-card-authentication-using-the-windows-view-client.html for more information on this problem.  Let me know if you have any questions.

• KB931125 Rompt Web server authentication by smart card...

  Windows 2008 Enterprise SP2 IIS7

  The Web site is authenticated against AD with smart card.  Works great... until KB931125 is installed.  As soon as this update of root certificate is installed, all customers get 403.7 error.  I'm going back the VM to the snapshot before KB931125 was installed and everything works well again.  It don't seem to be a way to delete/cancel the damage inflicted by this update of root certificate.

  I found this post: http://msmvps.com/blogs/bradley/archive/2007/03/01/warning-problems-with-root-certificates-update-kb931125.aspx and cleaned on the certificates, but it is not always correct it.

  Please notify.

  It turns out that I'm not a not delete simply not enough of the root certificates.  It works now after the removal of about 1/2 of them.

• Authentication Manager + GemPlus smart card reader

  Hi all!

  I was reading about View Manager Auth integration with RSA SecurID. I did some tests and worked like a charm.

  But what I could use solution gemplus smart card to authenticate users?

  Thank you.

  Best,

  Eduardo.

  If you found this information useful, please consider awarding points to 'Correct' or 'useful '.

  Hi Eduardo,

  VMware View supports RSA SecurID auth method. 2 factor.

  It also supports the opening of session of smart card on the desktop with SSO from the client to the office.

  There is an information guide to smart card on the vmware Web site explaining that: http://www.google.de/url?sa=t&source=web&ct=res&cd=1&ved=0CBYQFjAA&url=http%3A%2F%2Fwww.vmware.com%2Ffiles%2Fpdf%2Fview_cert_authentication.pdf&rct=j&q=SmartcardVMwareView + guide & ei = Vx75S6XuGMuLOOeNxZUM & usg = AFQjCNGqupwPpQBH34PP2mFe3zv1yIGIaw & sig2 = NHQsN1XjYLXgaXIx_5xqoA

  Kind regards

  Christoph

  Don't forget to assign points if this answer was helpful for you.

  Blog:

  http://Communities.VMware.com/blogs/Dommermuth | http://www.thatsmyview.NET/

• question on the smart card's mutual authentication process

  I have a question about the process to authenticate each other between the smart card and the host application.
  
  Basic knowledge
  As far as I understand, use of the host application the KMC to derive the static key, the value of the card and this set of keys, the host application creates the set of session keys. He uses this session defined key to check the cryptogram of the map and generate cryptogram of the host.
  
  Similar process is conducted by the card with the fact that static keys are stored in the vault of the smart card in the customization of the security field transmitter phase. It sends to the host application the cryptogram of the card.
  
  Framework
  I'm trying to review this process manually. I play the role of the host application and I have in hand the necessary cryptographic functions (Triple a) and Mac.
  
  Question
  I'm trying to calculate the MAC (cipher card) as described in section 5.4.1 of the CPS v1.1 (EMV card) but I can't receive the cryptogram of the card sent to me using the reference.
  Is there more than 1 function of MAC (in theory) and this MAC function varies from one card to another manufacturer?
  
  Thanks in advance
  Best regards
  JDL

  There may be something in the API c# BouncyCastle (I don't do much dotnet so I have not tried) http://www.bouncycastle.org/csharp/

  The MAC is relatively simple. There is a line where you encrypt a block of data at a time (as opposed to entire entry) and feed the result of an iteration in the next as the ICV (initial vector chaining). The original ICV value is 0x00 all.

  See you soon,.
  Shane

• Can I sign a document with my digital signature using professionals DC smart card?

  Can I sign a document with my digital signature using professionals DC smart card?

  You mean certificate on your smart card, right of signature? If the certificate on your smart card is designed to sign then the answer is "Yes, you can. CA that issued a certificate place some fields that can restrict its use, say, as well as encryption, only signature or authentication of the server only, etc. The certificate on your smart card doesn't have to be no restrictions to use incompatible with signature for you to be able to sign with her. You can simply try to connect your smart card and watch if Acrobat accepts the certificate for the signature.

• How to load .cap on a smart card

  Hello world!
  
  I am very confused with java cards. I have written an applet for java card. Tried in Eclipse + JCWDE. Send a few APDU units with apdutool.bat. Works great!
  
  However, I would like to go further and try on a real card chip. The only problem is that I don't know how to load on my card .cap file. I tried to find forums, references or something like that, but all I found was "trying to load, but get the error" or something like that.
  
  I use the JCOP for Eclipse tool (if only for any help)
  
  Can someone find works me of loading in princip? Is their any classes that can be used to simplify the task?
  
  Any help is appreciated
  / L

  Yes of course. Normal .zip file.
  I can print the contents of the file load.jcsh here:

  # /set-var path d:/Wi-Fi/javacard/download/eappsk32k
  #Switch trace mode on and connect to a PC/SC smart card reader
  #
  /mode trace=on
  /terminal
  #
  #Reset the card (request ATR) and select the CardManager
  /card
  #Set the keys in key set 255 of the JCShell for authentication later on
  #
  set-key 255/1/DES-ECB/404142434445464748494A4B4C4D4E4F
  set-key 255/2/DES-ECB/404142434445464748494A4B4C4D4E4F
  set-key 255/3/DES-ECB/404142434445464748494A4B4C4D4E4F
  #
  #Begin authentication using the appropriate key set
  init-update 255
  #
  #Complete authentication
  ext-auth
  #
  #Display the card registry to check if the applet is loaded and installed
  card-info
  #
  #delete 11223344556601
  #delete 112233445566
  card-info
  #
  #Upload the package holding the applet
  upload ${path}openeapsmartcard.cap
  #
  #
  #Install the applet in the package
  install 112233445566 11223344556601
  #
  #Display the card registry to check if the applet is loaded and installed
  card-info 
  

  You should do a few substitutes for your project.