Re: 2 Domains, 1 Smartcard

From: Eric Perlin [MS] (ericperl@microsoft.com)
Date: 08/10/02 

From: "Eric Perlin [MS]" <ericperl@microsoft.com>
Date: Fri, 9 Aug 2002 20:00:37 -0700

It's not completely accurate but it doesn't matter in your case:
You can only logon using the default container on your card so you will not
be able to logon to different domains using the same card. 

--
Eric Perlin [MS]
This posting is provided "AS IS" with no warranties, and confers no rights.
---
"Carlos" <cbranco@opensolutions.com> wrote in message
news:1a8d01c23e2e$3e6d8da0$a5e62ecf@tkmsftngxa07...
> I actually called MS Tech Support directly to answer my
> own question.  They said the answer is no.  Using
> Microsoft's native support for Smart Cards, you are only
> allowed to put 1 certificate on 1 smart card, regardless
> of which domain is comes from.  There is no way of adding
> multiple certificates onto a single Smart Card.
>
> Carlos
>
>
> >-----Original Message-----
> >Does anyone know if I can issue multiple certificates
> from
> >different Domains/Directories onto 1 single SmartCard.
> >(For various reasons we are not allowed to merge our
> >separate Domains into a single Forest.)
> >
> >Thanks,
> >CB
> >.
> >

Relevant Pages

  • Re: LogOnUser with Smart Card Credentials
    ... from the Windows logon dialog and serves our application only). ... call LogonUser with the credentials provided in the dialog. ... The card needs to be present to verify the PIN and also to obtain a token. ...
    (microsoft.public.platformsdk.security)
  • Re: LogOnUser with Smart Card Credentials
    ... from the Windows logon dialog and serves our application only). ... call LogonUser with the credentials provided in the dialog. ... The card needs to be present to verify the PIN and also to obtain a token. ...
    (microsoft.public.platformsdk.security)
  • Re: Windows logon through smart card.
    ... A real PKINIT SC logon uses a private key on the card. ... architecture and to enable smart card logon we have to hook msgina. ... If its a certificate based logon then how ...
    (microsoft.public.platformsdk.security)
  • Re: Windows logon through smart card.
    ... The card vendor should have a CSP ... You are correct that the certificate is stored only on the smart card. ... The smart card's role is to SIGN the logon process using the PRIVATE KEY ...
    (microsoft.public.platformsdk.security)
  • RE: GINA - exception in winlogon
    ... method for smart card logon in order to access system but ... certificate logon to unlonk the system, so it produces a new authentication ... our idea is to unlock the system only via smart card PIN authentication, ...
    (microsoft.public.platformsdk.security)