Re: CAC Card Access

From: Joe Kaplan \(MVP - ADSI\) (joseph.e.kaplan_at_removethis.accenture.com)
Date: 06/21/04


Date: Mon, 21 Jun 2004 13:22:56 -0500

This should be easy to do in ASP.NET. I'm not sure about WinForms.

Essentially, in ASP.NET you just need to make sure that you're site requires
SSL and you require client certificates. When the user navigates to the
website, then will be prompted for the certificate to send and should get
prompted for the smart card PIN as well.

In WinForms, you would have to come up with an authentication mechanism that
required the smart card. This would depend a lot on how you planned to
communicate with the server. If it is via a web services interface with
HTTPS, then you should be able to specify a client certificate in your proxy
class that would result in the same prompt for the smart card PIN. I'm not
sure about that. Also, if you aren't using planning to use SSL, you'll need
a network protocol that supports certificate auth.

Joe K.

"Roy" <Roy@discussions.microsoft.com> wrote in message
news:7E5CA06A-5E0D-4276-94A6-C52329BB20C5@microsoft.com...
> Greetings,
>
> I need to read a certificate stored inside a CAC (SmartCard) from both an
ASP.NET and WinForm application to authenticate users. The CAC card is
attached to the client computer via USB.
>
> Is .NET capable of this? If so, what classes accomplish this and do
examples exist?
>
> Or, do I need a third party SDK?
>
> Thanks,
>
> Roy



Relevant Pages

  • IE and SSL Auth based on Smart Card
    ... I have problem with IE and smart card SSL authentication. ... displays error message "Cannot find valid RSA key", ... How is the valid SSL certificate template that IE understand in such ...
    (microsoft.public.platformsdk.security)
  • RE: Problems enabling smart card login on windows 2000
    ... Bad Certificate; ... Troubleshooting Windows 2000 PKI Deployment and Smart Card Logon ... | - Installing a Windows 2000 Server as a Domain Controller ...
    (microsoft.public.win2000.security)
  • Re: question about private certificate stored on smart card
    ... >> With Windows 2003 CA there is an option to archive user's private key. ... >> Archival is done automatically when certificate is issued. ... >> able to find out there are no smart card CSP available today that would ... > The software does allow recovery of smart card encryption certificates. ...
    (microsoft.public.win2000.security)
  • Re: Importing a Symmetric Key into the Microsoft Base Smart Card C
    ... On the Internet Accounts dialog box, click the Add button and select ... address stated in the e-mail certificate. ... account and click the Properties button. ... Outlook Express will ask you to insert your smart card. ...
    (microsoft.public.platformsdk.security)
  • Disable smart card authentication on Windows2000 Professional!
    ... to disable MS smart card authentication function in my ... To enable smart card or other certificate authentication ... certificate authority for your server certificate must be ...
    (microsoft.public.win2000.security)