Re: certificate authentication

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 05/07/05


Date: Sat, 7 May 2005 07:20:37 -0700

1. Yes you can put two authN certificates on the card.

2. However, you cannot choose from multiple certs for logon. This
functionality is being considered for future releases.

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Top Whitepapers:
Auto-enrollment whitepaper: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
Best Practices for implementing Windows Server 2003 PKI: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
Troubleshooting Certificate Status and Revocation whitepaper: 
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
"Roberto Murasso (Tiscali)" <rmurasso@tiscalinet.it> wrote in message 
news:%237Pa2$CTFHA.3332@TK2MSFTNGP15.phx.gbl...
> Hi,
>
> I have a Windows 2003 server domain with Active Directory on and an 
> Enterprise Certification Authority.
> The problem is :
>
> I have a phisical person who has two AD accounts, one as user and onother 
> as administrator
> I have to give to him a smart card and remove the user name/password logon
>
> Can I generate two authentication certificates on the same samrt card?
> Can I choose (using windows logon) wich user log to the system?
> Do I have any component to modify/create to do this ?
>
> At the end of all, is this thing possible?
>
> Hope in your help
>
> 


Relevant Pages

  • rdp smartcard logon problem
    ... using smartcard. ... We get PIN dialog but can not logon. ... retrieve the certificate from the card. ... special functons for storing/retrieving certificates on smartcards which may ...
    (microsoft.public.windowsce.platbuilder)
  • Re: Auto-Enrollment of Certificates
    ... The adminpak is available on your Windows Server 2003 CD. ... how to install on various versions. ... you can use an enterprise CA to issue your certificates. ... This is a Active Directory configuration, ...
    (microsoft.public.platformsdk.security)
  • Re: client user certificates
    ... in certificates using Windows Server 2003 Enterprise Edition Enterprise CAs ... but it would be nice if there was a way to autoenroll the user. ... We have a Windows Server 2003 domain environment with a Enterprise ...
    (microsoft.public.windows.server.active_directory)
  • Re: Auto-Enrollment of Certificates
    ... What are you trying to do with this step: "'Add Standalone Snap-In"? ... Best Practices for implementing Windows Server 2003 PKI: ... Windows Server 2003 web enrollment and troubleshooting guide: ... > template in the 'Add Standalone Snap-In', I can just see Certificates ...
    (microsoft.public.platformsdk.security)
  • CA Services enrollment agent and templates
    ... In our office we use certificates in smartcards extensively: ... card logon, e-mail and so on. ...
    (microsoft.public.windows.server.security)