Cannot Logon using Smartcard
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Cannot Logon using Smartcard

 
Post new topic   Reply to topic    Windows Server Forum Index -> Security
Author Message
muhsinak
Guest
Posted: Sat Oct 29, 2005 8:50 am    Post subject: Cannot Logon using Smartcard Reply with quote
Hi all,

I am trying to setup smart card logon in Windows 2003 domain. Setup
Offline Rootca, and Enterprise Sub CA for certificate enrollment.
Assigned DC certificates. Able to write certificate and public/private
key pair to Smartcard. I am using Gemsafe libraries 4.2. Able to
access the certifcates for email encryption and signing from the smart
card. But only smartcard logon certifcates does not work.

when I try to logon I am getting error, event id 11 on application log,
saying an error occured while decrypting a message using the smartcard
inserted: Access denied.

Enabled Logon auditing, event id 537 on security log with status code
0xc000006d substatus code: 0xc0000321

I am using GemXpress Pro cards.

Any hints.........

Thanks
Ahmad Muhsin A.K.
Back to top
Daryl Lufor
Guest
Posted: Wed Nov 02, 2005 9:51 pm    Post subject: Re: Cannot Logon using Smartcard Reply with quote
Hi
i am Daryl Lufor from mauritius

i am not using Smart Cards in my organization but according to what i have
learned during my MCSE smart card require EAP/TLS as protocol of security to
authenticate through keberos in Active directory

try to look a little bit at this side the EAP/ TLS

cheers
Daryl
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Security All times are GMT
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB