Re: login to Website using a SmartCard

Hi,

yes this is possible - there are some steps necessary

- ssl must be enabled - in IIS / directory security / secure communication you can specify that you accept client certificates (IE will transparently use the certs from the smartcard on the client)

in ASP.NET you can query for client cert with Context.Request.ClientCertificate.IsPresent, and if you trust the cert, you can issue an authentication ticket without requiring cleartext credentials. A module would be a good place for that.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Hi,

anyone has experience of Website login (AD Integrated) using a Smart
Card ? In actually using the ASP:Login control to login the users
usign they AD credentials. User also have a smart card that permit
them to logon locally to Windows XP clients. I'd like to have them
login on the extranet without having to insert username and password,
but just Smart Card and PIN. Is is possible ?

Thanks.

Massimo Piceni



.

Relevant Pages

  • Re: IIS website - only allow users with client cert from our CA. P
    ... Rootyou wish to permit certificates issued from for access to your site. ... our CA's client cert? ... I only have a server certificate from our CA ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS website - only allow users with client cert from our CA. Possi
    ... > Why does IIS allow me to see my website when it doesn't have ... > our CA's client cert? ... I only have a server certificate from our CA ...
    (microsoft.public.inetserver.iis.security)
  • RE: Certificate logon on Unix
    ... I don't know of any package but there is prolly one out there you should ... The good news is that getting fulle client ... and server side authentication is pretty easy so it will work as a quick ... setup your CA and make the root cert Pbk available to everyone. ...
    (Security-Basics)
  • Re: Radius Server
    ... > so I'm guessing the client needs the Server Certificate, ... > export it from the server and import it to the client. ... >> But if you deployed EAP-TLS, you need a server cert and a client ...
    (microsoft.public.windows.server.networking)
  • RE: Penetration test of 1 IP address
    ... It does not look like the login screen found on the ... Penetration test of 1 IP address ... "I have been asked to perform a security audit of 1 IP address for client." ...
    (Pen-Test)