How to reload SSL certificate from smartcard

Hi,

We use a smartcard with a certificate to access a web site using SSL/HTTPS. The problem is that we need to prevent the user from accessing the site when the key is removed.

So, is there any way to check for the certificate either in Javascript or to force IE to reask the certificate to the key? Ideally this would be without prompting for the PIN again.
Thanks!
LVL 3
JonthemoonAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ParanormasticCryptographic EngineerCommented:
Once the SSL session is started, there isn't really a good way of restricting that if the card is removed, if that is what you are asking.  The cert on the card is only used during session setup, once the handshake is complete the cert is out of the picture.  You would need a client component installed to monitor for card removal.

For domain workstations where you are also using the smartcard to log into the workstation, you could enable the GPO setting to either lock or log out upon card removal.

Help this helps...
0
JonthemoonAuthor Commented:
Ha Paranormastic,

I finally found a way using an ActiveX that we use here that allows some way of polling the card using javascript. This works fine.

Thanks for your time.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ParanormasticCryptographic EngineerCommented:
That would be the client component method - it just had to be something outside of the SSL session.  Glad you got it working.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Web Browsers

From novice to tech pro — start learning today.