Re: multiple certificates on a smartcard?

From: PK (pk_at_no.spam)
Date: 10/21/04 

Date: Thu, 21 Oct 2004 22:43:05 +0200

Isnīt it so that the last added certificate will be considered to be "in the
first slot"?

-
PK
-

"Miha Pihler" <mihap-news@atlantis.si> skrev i meddelandet
news:uiO$HCwsEHA.3532@TK2MSFTNGP15.phx.gbl...
> Hi,
>
> Smart cards can hold as many certificates as there is storage on the card.
> The only problem is, the certificate that is used for smart card logon
must
> be in first slot (first place) on the card. If it is not and e.g. only
> "Secure E-mail" certificate is in first slot, logon will fail. Other then
> this, you can have smart card logon certificate in first slot, and signing
> certificate in second and encrypting on third, authenticating certificate
on
> fourth, etc...
>
> This is because the authentication process on logon windows can't display
> the list of certificates on smart card to chose with which you want to
> logon.
> Kind of related is also the reason why you can't use certificate on smart
> card for EFS (private key used for EFS must be stored on hard drive)...
>
> I heard somewhere that this will change in next version of Windows... (I
> guess we will see -- I heard same thing about Windows 2003 some time
before
> it was released).
>
> Mike
>
> "JB Fields" <jbfields@msn.com> wrote in message
> news:uDVwJgrsEHA.2128@TK2MSFTNGP11.phx.gbl...
> > Can a smartcard hold more than one certificate? Can the same card be
used
> > to log on to multiple accounts?
> >
> > --
> > jbfields@msn.com www.jbfields3.com
> > "Dogs may have kept us company on the hunt, but it was the cats who
> insisted
> > we invent houses and discover fire." -- Khiem Tran
> >
> >
>
>

Relevant Pages

  • Re: Offline Smart Card Logon
    ... So smart card logon would only work as long the notebooks have a vaild, ... If the CRL has expired, ... > For successful smart card logon, a valid CRL (certificate revocation list) ...
    (microsoft.public.windows.server.security)
  • LSALogonUser and smart cards....
    ... I have the following question concerning smart card logon on windows station. ... we query from a smart card (or any other certificate store). ...
    (microsoft.public.win32.programmer.networks)
  • Smart Card Certificate Logon and Smart Card Wireless EAP-TLS
    ... Is there anybody out there succesfully implement Smart Card Certificate ... The Wireless EAP-TLS do not allow 'Smart Card Logon' on the Extended Key ... When Smart Card Logon appears on the Certificate EKU, ...
    (microsoft.public.platformsdk.security)
  • Re: multiple certificates on a smartcard?
    ... the certificate that is used for smart card logon must ... "Secure E-mail" certificate is in first slot, ...
    (microsoft.public.windows.server.security)
  • RE: Problems enabling smart card login on windows 2000
    ... Bad Certificate; ... Troubleshooting Windows 2000 PKI Deployment and Smart Card Logon ... | - Installing a Windows 2000 Server as a Domain Controller ...
    (microsoft.public.win2000.security)
Loading