Smartcard-Webauthentication: Changes in IIS 6.0?

e9025902_at_stud2.tuwien.ac.at
Date: 10/27/05

  • Next message: Bernard Cheah [MVP]: "Re: IIS 6.0, Host Headers and SSL" 
    Date: 27 Oct 2005 00:38:51 -0700

    Hi there!

    I am testing Smartcard-Authentication with our Webapplication
    on IIS 5.0 and IIS 6.0 and found the following different
    behaviour: with IIS 5.0 the Smartcard PIN is asked several times
    on each Page, while with IIS 6.0 the PIN is asked only once.

    IIS 6.0 seems to cache the PIN or rather the authentication
    information. My tests showed, that after approximately 15
    minutes inactivity the PIN is asked again. Is this the Token
    Cache Timeout (UserTokenTTL registry setting) or something else?

    I read that SSL is handled differently in IIS 6, but does
    anybody know if my "caching assumption" is correct?

    Many thanks in advance
      Christian Swoboda

  • Next message: Bernard Cheah [MVP]: "Re: IIS 6.0, Host Headers and SSL"

    Relevant Pages

    • Re: Smartcard-Webauthentication: Changes in IIS 6.0?
      ... PIN is only known to local PC where you insert your smart card. ... from smart card and PIN are never transmited to IIS ... > Cache Timeout or something else? ...
      (microsoft.public.inetserver.iis.security)
    • Smartcard-Webauthentication: Changes in IIS 6.0?
      ... I am testing Smartcard-Authentication with our Webapplication ... on IIS 5.0 and IIS 6.0 and found the following different ... while with IIS 6.0 the PIN is asked only once. ... Cache Timeout? ...
      (microsoft.public.platformsdk.security)