RE: Software smart-card emulation



I'm not sure what the USB/CD suggestion was, actually. You just can't stick a cert somewhere and "autorun" it into the smartcard service. I got some suggestions offline, but they were not exactly what I was looking for. Looks like I'll just have to go the hardware route.

t

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx
[mailto:listbounce@xxxxxxxxxxxxxxxxx] On Behalf Of Jim Harrison
Sent: Wednesday, August 29, 2007 5:47 PM
To: Jex; focus-ms@xxxxxxxxxxxxxxxxx
Subject: RE: Software smart-card emulation

FWIW, Tim & are seeking different variations on the same theme.
Since I work mostly in virtual machines, I need something that's
strictly software.
I *can* set up a dedicated machine to get USB ports, but that's a huge
pain now.

Jim

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx
[mailto:listbounce@xxxxxxxxxxxxxxxxx] On Behalf Of Jex
Sent: Wednesday, August 29, 2007 1:25 PM
To: focus-ms@xxxxxxxxxxxxxxxxx
Subject: Re: Software smart-card emulation

I'm no expert, hardly, but I imagine you can do something custom with
mini-CDs, CDs, floppys, or USB keys that hold the certificate data,
and just set the authenticating machine to run the auto-play through
the authenticating program, with the added benefit that they can
function like a USB dongle-lock, so the computers won't function if
they don't have the cd/usb key/etc.

Just my two cents
John Calvin

On 8/28/07, Thor (Hammer of God) <thor@xxxxxxxxxxxxxxx> wrote:
Greetings security professionals:

Has anyone worked with a software Smart Card emulation package they
can
recommend? The goal is to test different "client authentication"
Windows smart card implementations without having to go out and
purchase
the actual physical hardware (and cards) to do so. Basically, I want
something that will let me offer up a cert to a server/service as if
it
were a "smart card."

tia
t

-----------------------------
vinni, viddi, vinni denuo



All mail to and from this domain is GFI-scanned.