RE: USB Tokens

From: Enis Arif (enis.arif@uti.ro)
Date: 03/25/03

  • Next message: Harlan Carvey: "Re: SMB Brute Force" 
    From: "Enis Arif" <enis.arif@uti.ro>
To: "'Justin Derry'" <jderry@bordertechnologies.com>, <focus-ms@securityfocus.com>
Date: Tue, 25 Mar 2003 20:39:48 +0200

    Windows 2000 has native support for smart card logon.
    You can use eAladdin PRO or Rainbow iKey 2032 which can store digital
    certificates.
    These certificates can be issued by the MS Certification Authority that
    comes with Win2k Server and publish them in the Active Directory. This
    is all you need to login in the domain with digital certificates.

    > -----Original Message-----
    > From: Justin Derry [mailto:jderry@bordertechnologies.com]
    > Sent: Tuesday, 25 March, 2003 7:50 AM
    > To: focus-ms@securityfocus.com
    > Subject: USB Tokens
    >
    >
    > Hi,
    > Has anyone used/developed/know of an application that can
    > secure the OS = authentication (GINA) by using a standard USB
    > token with say a = certificate on it.
    >
    > EG I have a 32Mb USB token with a certificate and when
    > windows boots you = insert the USB token into the workstation
    > and enter a password to unlock = the certificate.
    >
    > Thoughts?
    >
    > I am currently looking at if i have to buy a etoken from
    > eAlladdin or = somewhere. Would prefer to use a standard USB
    > token. Cheers Justin
    >
    >
    >
    > ----------------------------------------------------------------------
    > Get serious about enterprise anti-spam management.
    > SurfControl E-mail Filter for SMTP & Exchange
    > leverages multiple layers of technology to defeat
    > spam with accuracy. Download a free 30-day trial:
    http://www.surfcontrol.com/go/zsfmsl1

    ----------------------------------------------------------------------
    Get serious about enterprise anti-spam management.
    SurfControl E-mail Filter for SMTP & Exchange
    leverages multiple layers of technology to defeat
    spam with accuracy. Download a free 30-day trial:
    http://www.surfcontrol.com/go/zsfmsl1

  • Next message: Harlan Carvey: "Re: SMB Brute Force"

    Relevant Pages

    • [NT] Windows File Protection Arbitrary Certificate Chain Vulnerability
      ... Beyond Security would like to welcome Tiscali World Online ... Windows File Protection will trust any digital signature whose certificate ... chain is rooted at any one of the Trusted Root Certification Authorities. ... chains but also as valid Root CA's for code signing certificates. ...
      (Securiteam)
    • Re: How to fix broken security in Windows 2000?
      ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
      (microsoft.public.windowsupdate)
    • Re: How to fix broken security in Windows 2000?
      ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
      (microsoft.public.security)
    • Re: How to fix broken security in Windows 2000?
      ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
      (microsoft.public.win2000.security)
    • Re: How to fix broken security in Windows 2000?
      ... explicitly identify the missing certificates using SFC or some other tool. ... it turns out Windows 2000 doesn't support that feature after ... all W2K machines have the problem seems to be holding up (and I have not yet ...
      (microsoft.public.win2000.windows_update)