Solved

MiniSD card as smartcard?

Posted on 2009-05-02
1
425 Views
Last Modified: 2012-05-06
I've never used smartcard technology but i'm interested in learning more. I have a CA in my microsoft domain and I was wondering if I am able to put my user certificate on a MiniSD card so I can use that to login on my workstation.  If I understand correctly, the only thing that defines a smartcard is a certificate assigned to the user. Since the computers have MiniSD card readers is this possible and is it as simple as putting my certificate on the MiniSD card?
0
Comment
Question by:OriNetworks
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 33

Accepted Solution

by:
Dave Howe earned 500 total points
ID: 24289376
Pretty much. Smartcards are, well, smarter than that though, they actually carry out the cryptographic operations for you, and all would involve installing drivers for the appropriate APIs (PKCS #11 and #15 are applicable to smartcards) which, if you were rolling your own solution, you would need to write yourself.

the task isn't undoable - in fact, there is a perfectly good PKCS #11 "soft token" provider as part of the mozilla project which can be bent into service - but you would be looking at getting a skilled programmer to turn that into a windows service for you that read from the sd card the pkcs #15 store and did the cryptographic operations for you (I am not aware of any such service prewritten, but if anyone has one, I would be more than happy to be corrected). It would probably be faster/easier to write your own gina (there are sample implementations available) that checks the card for a user certificate, verifies it, extracts the user name, and then prompts for the domain password as normal.
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Smart phones, smart watches, Bluetooth-connected devices—the IoT is all around us. In this article, we take a look at the security implications of our highly connected world.
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question