Re: HELP....smart card certificate was not trusted - logon denied !
barabba72_at_hotmail.com
Date: 07/27/05
- Next message: VirendraSharma: "How to restrict CMD.EXE and taskmgr.exe through GPO in windows 200"
- Previous message: Danny Sanders: "Re: Can't open domain security policy in AD when primary domain controller is turned off"
- In reply to: Brian Komar: "Re: HELP....smart card certificate was not trusted - logon denied !"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 27 Jul 2005 12:14:02 -0700
Thank you both for your helping me. I really appreciate it.
Tomorrow I will check what you suggest and will post any results.
Regards.
Brian Komar wrote:
> In article <1122479483.985641.177310@f14g2000cwb.googlegroups.com>,
> barabba72@hotmail.com says...
> > Hi all,
> >
> > I have a particular user who cannot logon using his smart card. He was
> > able to use it until yesterday.
> > The terminal server says that "the smart card certificate used for
> > authentication was not trusted".
> >
> > Other users have no problems in logging on to the domain using smart
> > cards.
> >
> > I checked the user's published certificate and it's ok, still valid.
> > the CRL distribution point is also fine and still valid. I already
> > checked Microsoft Knowledge Base 281245.
> >
> > Windows 2000 domain - PKI,
> > Windows 2003 Terminal Server
> > Windows XPE Thin Clients in workgroup
> > ActivCard Gold 2.3.1
> >
> > Anyone has an idea ?
> > Thank you very much for your help.
> >
> >
> Do the following command from both the client computer and the terminal
> services computer. The command requires that you export the smart card
> certificate as a DER or BASE64 file.
>
> certutil -verify -urlfetch <certfile>
>
> The output should provide information as to why the certificate is not
> trusted.
>
> Brian
> --
> ==
> Brian Komar
> MVP - Windows - Security
> http://www.identit.ca/blogs/brian
- Next message: VirendraSharma: "How to restrict CMD.EXE and taskmgr.exe through GPO in windows 200"
- Previous message: Danny Sanders: "Re: Can't open domain security policy in AD when primary domain controller is turned off"
- In reply to: Brian Komar: "Re: HELP....smart card certificate was not trusted - logon denied !"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
