Smartcard-Webauthentication: Changes in IIS 6.0?

e9025902_at_stud2.tuwien.ac.at
Date: 10/20/05

  • Next message: sunit: "Re: Add Private Keys in System Store MY" 
    Date: 20 Oct 2005 02:34:52 -0700

    Hi there!

    I am testing Smartcard-Authentication with our Webapplication
    on IIS 5.0 and IIS 6.0 and found the following different
    behaviour: with IIS 5.0 the Smartcard PIN is asked several times
    on each Page, while with IIS 6.0 the PIN is asked only once.

    IIS 6.0 seems to cache the PIN or rather the authentication
    information. My tests showed, that after approximately 15
    minutes inactivity the PIN is asked again. Is this the Token
    Cache Timeout (UserTokenTTL registry setting)?

    I read that SSL is handled differently in IIS 6, but does
    anybody know if my "caching assumption" is correct?

    Many thanks in advance
      Christian Swoboda

  • Next message: sunit: "Re: Add Private Keys in System Store MY"

    Relevant Pages

    • Re: Smartcard-Webauthentication: Changes in IIS 6.0?
      ... PIN is only known to local PC where you insert your smart card. ... from smart card and PIN are never transmited to IIS ... > Cache Timeout or something else? ...
      (microsoft.public.inetserver.iis.security)
    • Smartcard-Webauthentication: Changes in IIS 6.0?
      ... I am testing Smartcard-Authentication with our Webapplication ... on IIS 5.0 and IIS 6.0 and found the following different ... while with IIS 6.0 the PIN is asked only once. ... Cache Timeout or something else? ...
      (microsoft.public.inetserver.iis.security)