Cannot use one Certificate for Smart Card Logon and EAP-TLS for Wireless
From: erha (rudy_at_guardmydata.com)
Date: 04/18/05
- Next message: Michel Gallant: "Re: CryptImportKey() & CryptExportPublicKeyInfo()"
- Previous message: phoebe: "How to invoke custom CSP?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 18 Apr 2005 20:44:21 +0800
Hi all, (especially Microsoft)
We currently try to integrate our Smart Card to be used in Wireless EAP-TLS
authentication.
Currently we use our Smart Card for Microsoft Windows Certificate Logon.
To support the EAP-TLS, we add Client Authentication to the Extended Key
Usage (EKU).
But we are failed. The Microsoft complain the "Windows was unable to find a
certificate to log you on the network XXXX".
Upon this error, we are trying to use certificate from Certificate Store.
We import Certificate#1 to the Certificate store.
Certificate #1:
EKU=Client Authentication
Key Usage=Digital Signature, keyEncipherment, keyAgreement
MS Windows do not complain when we are using Certificate#1. The Wireless is
successfully connected.
We delete Certificate#1 from Certificate store and import Certificate# 2.
Certifcate #2:
EKU=Client Authentication, Smart Card Logon
Key Usage=Digital Signature, keyEncipherment, keyAgreement
And ha ha ......
The MS Windows complain "Windows was unable to find a certificate to log you
on the network XXXX".
Why does the Smart Card Logon on EKU make the EAP-TLS failed ?
We need this two EKU on one Certificate because currently Microsoft called
our CSP using "default container" for Smart Card Logon and EAP-TLS.
And we cannot differentiate who is actually calling our CSP.
Has anyone face this problem before ?
Can someone from Microsoft confirm about this problem ?
Thank in advance for any help or idea......
Rudy
- Next message: Michel Gallant: "Re: CryptImportKey() & CryptExportPublicKeyInfo()"
- Previous message: phoebe: "How to invoke custom CSP?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
