Solved

MiniSD card as smartcard?

Posted on 2009-05-02
1
410 Views
Last Modified: 2012-05-06
I've never used smartcard technology but i'm interested in learning more. I have a CA in my microsoft domain and I was wondering if I am able to put my user certificate on a MiniSD card so I can use that to login on my workstation.  If I understand correctly, the only thing that defines a smartcard is a certificate assigned to the user. Since the computers have MiniSD card readers is this possible and is it as simple as putting my certificate on the MiniSD card?
0
Comment
Question by:OriNetworks
1 Comment
 
LVL 33

Accepted Solution

by:
Dave Howe earned 500 total points
ID: 24289376
Pretty much. Smartcards are, well, smarter than that though, they actually carry out the cryptographic operations for you, and all would involve installing drivers for the appropriate APIs (PKCS #11 and #15 are applicable to smartcards) which, if you were rolling your own solution, you would need to write yourself.

the task isn't undoable - in fact, there is a perfectly good PKCS #11 "soft token" provider as part of the mozilla project which can be bent into service - but you would be looking at getting a skilled programmer to turn that into a windows service for you that read from the sd card the pkcs #15 store and did the cryptographic operations for you (I am not aware of any such service prewritten, but if anyone has one, I would be more than happy to be corrected). It would probably be faster/easier to write your own gina (there are sample implementations available) that checks the card for a user certificate, verifies it, extracts the user name, and then prompts for the domain password as normal.
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

Article by: btan
Provide an easy one stop to quickly get the relevant information on common asked question on Ransomware in Expert Exchange.
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now