[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3073
  • Last Modified:

How to change smartCard Pin in CSP

hi all
i use CSP to access smartcards and usbtoken , but i don't know how to change smartcard pincode .
please help me !
thanks
0
ncsvietnam
Asked:
ncsvietnam
4 Solutions
 
karampelasCommented:
It depends what windows you have. For XP/ 2003 server you will need the Smart Card Pin Tool is included as part of the downloadable Smart Card Base CSP package (KB909520) available via Windows Update. It becomes available as soon as the
Base CSP package is installed on the machine.

In Windows Vista, users can change their smart card user PIN using the secure desktop.

For exact details read the following. Their are two paragraphs that explain how to do it.
http://www.netsolutions.gemalto.com/download/070507%20WP%20Gemalto%20%20NET%20PIN%20Mgmt%20in%20Windows%20Platforms.pdf
0
 
ncsvietnamAuthor Commented:
thank you very much for your responding . but my mean is change smart Card pin by program , use Cryptography API in window platform .
0
 
karampelasCommented:
0
Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as high-speed processing of the cloud.

 
KonstantinPrinzCommented:
KB909520 installs pintool.exe into %WinDir%\system32
0
 
btanExec ConsultantCommented:
There is no CAPI (if the smartcard CSP support it) calls on changing the PIN but rather replaying the cached PIN (and clearing it using CryptSetParams)

The most straight forward method is via sending APDU commands like CHANGE CHV (you can get it from vendor if proprietary else by default they are the standard ISO 7816-4) to the smartcard thru the reader. It can be via SCard Commands or via PKCS#11 (if supported).

For Scard command, use Scardtransmit (see http://msdn.microsoft.com/en-us/library/aa379804(VS.85).aspx) to send the APDU

Try out the APDU player as well (to try out APDU) but be wary on PIN lockout - http://www.codeproject.com/KB/smart/SmartcardFmwk.aspx

0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now