Smartcard CSP Problem

From: Alf (alf1982_at_hotmail.de)
Date: 11/29/04 

Date: Mon, 29 Nov 2004 12:01:35 +0100

Hello, maybe somebody can help me out!

I am to develop a SmartCard CSP, but with no actual SmartCard behind it, but
rather a Software System that simulates it.

I so far devloped a CSP which wrappes the MS Base CSP for the common
functionality and will use the System for the Rest.

Now, I have a logical problem.

The CSP should be used for Mail Signing and encrypting in Outlook, as well
as for windows logon.

If I understood the concept of the certificate handling in windows, you have
to enroll a certificate for a certain user who is present in the active
directory - let's call him Bob. When enrolling this certificate, you choose
the type (smartcard certificate) and the corresponding CSP (in this case, my
CSP).

The result of the enrollement would be a new certificate stored on the
SmartCard and installed in windows.

Question: Am I rigth with the above?
Then - next Question: How does the enrollemnt process create and store the
certificates on the SmartCard since the CryptoApi (CP* ) functions do not
provide certification handling - Does the enrollement task itsself store the
certifcate to the SmartCard? (And how, cia driver?)

Are there any other usefull documentations on what a SmartCard CSP has to
implement?

Thanks!

Relevant Pages

  • Re: Key archival and smartcard CSP
    ... the first question is that does your smartcard ... CSP allow the public/private key pair to be imported into its own store? ... > - When the certificate has been issued, i get the container name and the ...
    (microsoft.public.platformsdk.security)
  • Re: Smartcard CSP Problem
    ... You don't need to emulate a smartcard CSP for it to work with S-MIME. ... But your "simulated" smartcard CSP is not going to work for Windows logon. ... > If I understood the concept of the certificate handling in windows, ... > provide certification handling - Does the enrollement task itsself store ...
    (microsoft.public.platformsdk.security)
  • Smartcard Issue in 2003? : Problem Solved
    ... When we use the webpages certsces.asp, our CSP is not ... When we create new smartcard templates, ... the certces.asp requires one enrollment certificate for ...
    (microsoft.public.platformsdk.security)
  • How does IE determine which smartcard to use?
    ... I have two smartcard readers connected to my computer and a smartcard ... enrolled using both smartcards with the same CSP, ... is a certificate on each of the smartcards assigned to him. ... right smartcard after selecting a certificate in the MY store. ...
    (microsoft.public.platformsdk.security)
  • RE: Relative Security Provided by Cached Domain Credentials?
    ... So when a user logs on the w2k terminal using a smartcard + pin no (rather ... If it does then EFS ... profile currently logged on for the private certificate. ...
    (Focus-Microsoft)