Re: How does scrdenrl.dll filter the CSP's ?

From: Kåre Langedrag (klangedr_at_broadpark.no)
Date: 12/22/03

  • Next message: Umer Mian: "Re: Refreshing User Access Token Without Logging Off"
    Date: Mon, 22 Dec 2003 21:21:32 +0100
    
    

    Hi,

    Ok, because according to the "smartcard csp cookbook" it says that smartcard
    CSP's should return CRYPT_IMPL_HARDWARE or CRYPT_IMPL_MIXED. Since we
    allready thought this was quite strange, we tried to return
    CRYPT_IMPL_REMOVABLE, but it still does not get listed in the csp
    enumeration returned by the scrdenrl.dll....

    What do you mean by "registered on the machine"? Yes, it is registered in
    the registry, and all kind of certificates can be issued to the smartcard
    with the "advanced request" web pages (including smartcard logon, but
    offcourse, only to the current logged inn user).

    We really need some help on this asap.

    best regards
    Kåre Langedrag

    "Vishal Agarwal[MSFT]" <vishala@online.microsoft.com> wrote in message
    news:%2386mqilxDHA.3140@TK2MSFTNGP11.phx.gbl...
    > Is your CSP registered on the machine you are trying to enroll from?
    >
    > scrdenrl.dll filters on the registered CSP's by making a call to
    > CryptGetProvParam for PP_IMPTYPE flags and if the return value has
    > CRYPT_IMPL_REMOVABLE, then this CSP will be listed in the list.
    >
    > Hope this helps,
    > Thanks,
    > Vishal [MSFT]
    >
    > --
    > This posting is provided "AS IS" with no warranties, and confers no rights
    > "Kåre Langedrag" <kare.langedrag@ergo.no> wrote in message
    > news:290DFF91-1CEE-4054-A224-6B7CD6CB49DC@microsoft.com...
    > > Hi,
    > >
    > > We have developed a fully functional smartcard CSP, but we have one
    > _urgent_ problem.
    > >
    > > PROBLEM: The scrdenrl.dll will not take our CSP as input when enrolling
    > certificates, neither does it list our CSP as one of the available
    smartcard
    > CSP's.
    > >
    > > COMMENT: Our CSP are fully functional, and we use it to enroll
    > certificates directly to the users, but we have problems using the
    > "smartcard enrollment station" method (a user with an available enrollment
    > certificate and proper priveleges can request a smartcard certificate on
    > behalf of another user). I have tried multiple times to post this
    question,
    > and I really hope to get the solution this time. If possible, we would get
    > in contact with the programmer which made the scrdenrl.dll
    > >
    > > QUESTION: How does the scrdenrl library filter out which CSP's
    (smartcard
    > CSP's) to list and support? What do we have to do in order to make our CSP
    > to become a valid CSP for enrolling with the scrdenrl.dll?
    > >
    > >
    > >
    > >
    >
    >


  • Next message: Umer Mian: "Re: Refreshing User Access Token Without Logging Off"

    Relevant Pages

    • How make our CSP to be used by scrdenrl.dll
      ... met by the CSP in order to use the scrdenrl.dll to issue certificates on our ... we can enroll a smartcard logon certificate to the administrator ... CSP is not listed in the available CSP enumeration in scrdenrl.dll. ... >> Is your CSP registered on the machine you are trying to enroll from? ...
      (microsoft.public.platformsdk.security)
    • Re: Smartcard CSP Problem
      ... You don't need to emulate a smartcard CSP for it to work with S-MIME. ... But your "simulated" smartcard CSP is not going to work for Windows logon. ... > If I understood the concept of the certificate handling in windows, ... > provide certification handling - Does the enrollement task itsself store ...
      (microsoft.public.platformsdk.security)
    • Re: DEBUGCHK error in smartcard
      ... I am looking int the CETK. ... If you do not have a CSP you can communicate with the smartcard by using the ... A smartcard CSP will map CryptoAPI calls into Smart Card Resource ...
      (microsoft.public.windowsce.platbuilder)
    • RE: Disabled Smartcard logon?
      ... the Smartcard Logon GINA option from being displayed. ... csp for winlogon. ... > directly to the reader. ... > Ask the vendor if they have such service which you can use from your CSP code. ...
      (microsoft.public.platformsdk.security)
    • Re: Smartcard CSP Problem
      ... Emulating a smartcard reader is required for smartcard logon. ... > flash drive with an embedded crypto processor to perform the encryption. ... Would a simple CSP DLL work in this case? ... Is there a need to emulate a smart card? ...
      (microsoft.public.platformsdk.security)