Re: Smartcard CSP Problem

From: Eric Perlin [MS] (ericperl_at_online.microsoft.com)
Date: 12/06/04 

Date: Mon, 6 Dec 2004 14:46:22 -0800

You don't need to emulate a smartcard CSP for it to work with S-MIME. A
software CSP can be used in this case.
But your "simulated" smartcard CSP is not going to work for Windows logon.
Winlogon/msgina really look for physical smartcards.
Without something that's exposed through the smartcard subsystem, you're not
even going to get a PIN prompt. 

-- 
Eric Perlin [MS]
This posting is provided "AS IS" with no warranties, and confers no rights.
---
"Alf" <alf1982@hotmail.de> wrote in message
news:eoy#CMg1EHA.2624@TK2MSFTNGP11.phx.gbl...
> Hello, maybe somebody can help me out!
>
> I am to develop a SmartCard CSP, but with no actual SmartCard behind it,
but
> rather a Software System that simulates it.
>
> I so far devloped a CSP which wrappes the MS Base CSP for the common
> functionality and will use the System for the Rest.
>
> Now, I have a logical problem.
>
> The CSP should be used for Mail Signing and encrypting in Outlook, as well
> as for windows logon.
>
> If I understood the concept of the certificate handling in windows, you
have
> to enroll a certificate for a certain user who is present in the active
> directory - let's call him Bob. When enrolling this certificate, you
choose
> the type (smartcard certificate) and the corresponding CSP (in this case,
my
> CSP).
>
> The result of the enrollement would be a new certificate stored on the
> SmartCard and installed in windows.
>
> Question: Am I rigth with the above?
> Then - next Question: How does the enrollemnt process create and store the
> certificates on the SmartCard since the CryptoApi (CP* ) functions do not
> provide certification handling - Does the enrollement task itsself store
the
> certifcate to the SmartCard? (And how, cia driver?)
>
> Are there any other usefull documentations on what a SmartCard CSP has to
> implement?
>
> Thanks!
>
>
>

Relevant Pages

  • Re: Key archival and smartcard CSP
    ... the first question is that does your smartcard ... CSP allow the public/private key pair to be imported into its own store? ... > - When the certificate has been issued, i get the container name and the ...
    (microsoft.public.platformsdk.security)
  • Smartcard CSP Problem
    ... I am to develop a SmartCard CSP, but with no actual SmartCard behind it, but ... I so far devloped a CSP which wrappes the MS Base CSP for the common ... If I understood the concept of the certificate handling in windows, ... The result of the enrollement would be a new certificate stored on the ...
    (microsoft.public.platformsdk.security)
  • Smartcard Issue in 2003? : Problem Solved
    ... When we use the webpages certsces.asp, our CSP is not ... When we create new smartcard templates, ... the certces.asp requires one enrollment certificate for ...
    (microsoft.public.platformsdk.security)
  • How does IE determine which smartcard to use?
    ... I have two smartcard readers connected to my computer and a smartcard ... enrolled using both smartcards with the same CSP, ... is a certificate on each of the smartcards assigned to him. ... right smartcard after selecting a certificate in the MY store. ...
    (microsoft.public.platformsdk.security)
  • RE: Disabled Smartcard logon?
    ... the Smartcard Logon GINA option from being displayed. ... csp for winlogon. ... > directly to the reader. ... > Ask the vendor if they have such service which you can use from your CSP code. ...
    (microsoft.public.platformsdk.security)