Re: Smartcard-Webauthentication: Changes in IIS 6.0?

e9025902_at_stud2.tuwien.ac.at
Date: 10/27/05 

Date: 27 Oct 2005 06:19:43 -0700

Hi!

The first posting was not phrased correctly; the 2 things that really
interest me are:

1) Why is the behaviour different between IIS 5.0 and IIS 6.0? (Of
course I prefer the
    IIS 6.0 behaviour ;-)

2) When I pull the smartcard on IIS 6.0 the client remains
authenticated!! Only after
    about 15 minutes of inactivity the SSL session seems to be
renegotiated and
    since the private key is missing it fails. There was a thread in
this group
    about this being very insecure, do you know how to make this "more
secure"?
    Possibly a webserver setting?

Thanks a lot!
  Christian

Relevant Pages

  • IE client authentication smartcard ,,,
    ... I have an IIS ... website that requires client authentication. ... smartcard is inserted they are prompted for the smartcard password. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • IIS client authentication smartcard ,,,
    ... I have an IIS ... website that requires client authentication. ... smartcard is inserted they are prompted for the smartcard password. ...
    (microsoft.public.platformsdk.security)
  • IIS client authentication smartcard ,,,
    ... I have an IIS ... website that requires client authentication. ... smartcard is inserted they are prompted for the smartcard password. ...
    (microsoft.public.security)
  • Re: My Intranet Website
    ... >access to pull up information on various things. ... >content that should only be available to corporate users. ... >create another website or use host headers... ... For some reason, IIS ...
    (microsoft.public.inetserver.asp.general)
  • Re: Another Mirror Of PCCBBS
    ... attempting to pull down that 50 or so MB ZIP file. ... (Speaking of, where's the HTML that goes with those other files? ... I may be lazy, but IIS ...
    (comp.sys.ibm.ps2.hardware)