Virtual Smart Cards with a 3rd Party CA

Hi,
I am new to this but we want to start implemeting virtual smart cards but I am having difficult finding out how to use a 3rd party CA with them. Any help would be appreciated.
Thanks in advace,
Liz

Hi Liz,
Here is an article below which could be useful to you:
Guidelines for enabling smart card logon with third-party certification authorities
http://support.microsoft.com/kb/281245
Best Regards,
Amy

Similar Messages

Unlocked Virtual Smart Card using the PUK and Adminkey

At my company we use virtual
smart card with WIN8.1
and some user has blocked you from failed attempts
by the VSC. The question is
whether there is a tool that allows unlocked
the virtual smart card using
the PUK or Adminkey password? The error
that occurs to me is the following:
“The security device cannot process the PIN.
The PIN has been blocked temporarity because too many incorrect PINs have been entered, Try again later. If this message reoccurs, contact your administrator to reset the lockout
period for this security device”

Hi dtencio,
It`s unreasonable to use PUK or Admin key instead of PIN ,because
the VSC uses two-factor authentication and this guarantees the pc`security.
To get more information, here is link for reference:
Evaluate Virtual Smart Card Security
http://technet.microsoft.com/en-us/library/dn579257.aspx
When PIN is blocked or the TPM is in a lockout state, we recommend you to contact with your administrator to reset user PIN or reset lockout of TPM.
If you are tired of the frequent blocked or locked out issue, we recommend you to contact with your administrator to change the lockout time in policy.
Best regards

Logon with Virtual Smart Card Breaks Run As Administrator

I've been testing the Virtual Smart Card (VSC) capability on a Surface Pro 2 and Dell Latitude E7240.
This may be by design however, I have noticed that if I login using the VSC I am unable to use "Run As Administrator" functionality - for example:
Command Prompt from Start Screen
Task Manager
I'm prompted for a username / password or the VSC PIN.
In my environment the Administrative user does not have a VSC, so it is a username/password. When using Run As Administrator I'm therefore always entering a username and password.
Once the credentials are entered the prompt goes away but the application never runs.
If I lock/unlock the session and login using username/password for the non-admin user, instead of the VSC and PIN, I am able to elevate using Run As.
I have noticed that I can use the workaround as specified in this article:
http://support.microsoft.com/kb/2013976
To work around this issue, start the application using the Run as different user right-click context menu option and select the smart card reader of choice.
Click Start, select Programs, and locate the shortcut item in the Programs menu or the application folder for the application you want to run
Hold down the SHIFT key while you right-click the shortcut item, and select Run as different user.
Enter the username, password and the domain name or choose a smart card logon.
Seems a little odd... maybe I am missing something. If anyone can assist that would be great.
Thanks, Chris
MCTS 70-640 | MCTS 70-642 | Prince2 Practitioner| ITIL Foundation v3 | http://www.cb-net.co.uk

Hi Chris,
I also have this issue. I think it is a known issue for Windows.
I did some more research in web and found what I was looking for.
RUNAS /SMARTCARD Only Supports a Single Smart Card Reader
http://support.microsoft.com/kb/2013976
How Smart Card Logon Works in Windows
http://technet.microsoft.com/en-us/library/ff404285(v=WS.10).aspx
Guidelines for enabling smart card logon with third-party certification authorities
http://support.microsoft.com/kb/281245
Thanks

Disk Doctor Fails, S.M.A.R.T , anyway to fix with a 3rd party utility?

On my server, I get a Disk Doctor Fails, S.M.A.R.T , anyway to fix with a 3rd party utility?
Thanks

If you're looking for help testing the Disk Doctor diagnostic tool, then you'll need to work with those folks and with the particular details of the SMART data being returned from the disk you're working with; the former and contents of the SMART data can vary by vendor.
But given you're using a disk diagnostic and posting here, I'll assume that you're having I/O problems, and the "fix" is to replace the drive.
If you're working with a dual-disk Mac Mini Server with software RAID enabled, the data can be recovered from the mirror.
If you don't have a current backup and don't have mirroring enabled and need some data off the disk that's reporting SMART errors, then you may end up working with a disk data recovery package, or a data recovery firm. (I wouldn't spend much time attempting this, too, as performing disk verifications and related activities on a questionable or failing disk can reduce the chances of recovering the remaining disk data.)

Programming multiple smart cards with multiple smart card readers in a PC causes a PCSCException in a smart card that is in progress

Hi,
I develop a Java code using smartcardio API to program a smart card. My GUI allows to add at most 5 smart card readers that will wait for card present, then do authentication and program the smart card with an application, then wait for card removal. This is a separate thread running in a loop for each smart card reader added as programmer.
The problem occurs when a certain smart card is in progress and I inserted another smart card to another smart card reader. Both smart card reader halts and throw sun.security.smartcardio.PCSCException: Unknown error 0x8010002f.
I also observed that every time there is an attempt to insert/remove a smart card in the smart card reader that is connected to the USB port would cause the programming in progress to be interrupted and throw the PCSCException.
These are some exceptions I got during my testing:
sun.security.smartcardio.PCSCException: Unknown error 0x8010002f
at sun.security.smartcardio.PCSC.SCardTransmit(Native Method)
at sun.security.smartcardio.ChannelImpl.doTransmit(ChannelImpl.java:171)
java.lang.Exception: Loader Record Failed: 6E | 0 //Sometimes I got this return code SW1 0x6E SW2 0x00 which means an APDU with an invalid 'CLA' bytes was received. I had check the command before it was sent and it was correct.
Help me understand this issue. I think the CardTerminal.isCardPresent(), CardTerminal.waitForCardPresent(0), and CardTerminal.waitForCardAbsent(0) cause this issue that CardChannel.transmit(apduCommand) is interrupted or the smart card insertion/removal causes the CardChannel.transmit(apduCommand) is interrupted.
Regards,
Knivez

Hi,
when you work with one smartcard reader only usually you address the slot -1 that means "the first found".
But to deal with multiple readers you have to use slots of course since one reader will be slot 0, next reader will be slot 1 and so on...
So a credential object will be identified on a system by a couple
<slot,alias>
After that, the way to address slots (I mean the syntax) depends on the classes you are using...
Bye

Is there any way to upload iWeb files updates only with a 3rd party ftp program to a new hoster, e.g. Godaddy? I see no posts newer than 2007

Is there any way to upload iWeb files updates only with a 3rd party ftp program to a new hoster, e.g. Godaddy? I see no posts newer than 2007.

If you are using iWeb V 3, there are two other options for publishing the site...
http://www.iwebformusicians.com/iWeb/Publish-Website.html
Some pointers for choosing hosting...
http://www.iwebformusicians.com/iWeb/Website-Hosting.html

Can I set "open with" for files - associate file types with a 3rd party app

I have PDF file attachments inside my OmniFocus application. When I double-tap them, they get opened in the standard Apple PDF viewer. But I have a better 3rd-party app which opens PDFs and allows me to edit them (mark them up) - I'd like the attachments to open in this app instead of the normal PDF viewer. I don't want to have to switch to the 3rd party app to open it - it's important to me that I can place comments on many, many PDFs inside of OmniFocus. So:
1) is it possible to ask the iPad to have all PDFs to open in this 3rd party app?
2) if not, is it possible to name the attachments some other extension (e.g., .xyz) and tell it to open all .xyz files with the 3rd-party PDF viewer?
thanks in advance,
Mike

Michael Levin wrote:
just out of curiosity: how did you see this without buying the app - is there some general way to get a trial from the App Store?
When You view the features of the app in the app store, there are pictures of some of the different screens under the main description of the app. I swiped through the pictures and the fourth photo shows a screen - An image in the black box pointing to the image name - roots.jpg. In the window to the right - it says -Action - at the top - in the grey border. I wouldn't have known that the arrow didn't give the same functionality as it does when you open the PDF in Mail. But I was able to see the trash can, the curved arrow and the blue done button on the right. I never heard of the app until we started to posting. Unless the app specifies that there is a free trial period, there is no way that I know to try an app for free.
The thing that I find odd is that you say the arrow is greyed out making that feature unavailable. That arrow icon on the iPad in Safari or Mail is what directs you to the options for - open in, print, email, etc features on the iPad. I assume that arrow must have some functionality somewhere in the app. Not sure why it is greyed out. But I stress, I know nothing about the features of the app or what it is designed to do.
Message was edited by: Demo

When I install OS 10.6 will iMovie 6 still be compatible along with the 3rd party plug ins?

When I install OS 10.6 -Snow Leopard-will iMovie 6 still be compatible along with the 3rd party plug ins?
Also, Firefox says Apple no longer supports OS 10.5 as far as security goes. Now what do I do?
I like to use both Safari and firefox.

iMovie 6 works just fine, even in 10.8. The plug-ins may not work in 10.7 and 10.8 as most use PPC code.

Can i use SLE4428 smart card with java card developmentkit 2.1.2

Can i use SLE4428 smart card with java card developmentkit 2.1.2
plz reply

No. SLE4428 is memory card and not Java Card.

Help with a 3rd party airport extreme card

I have a G4 power mac running 10.3.9. I purchased the following 3rd party card on ebay:
- Truly Plug & Play - NO complicated software CD setup at all.
- Uses Airport Drivers built into MAC OS X
- Amazing 802.11g 54Mbps Wireless - Airport Extreme speed
- Range: 50' Indoors, 150' outdoors (maximum range in ideal conditions).
- Supports WPA (TKIP,AES),802.1x and standard 128/64-bit WEP Wireless Security
- Fully Compatible with: Apple Power Macintosh G3 (Blue & White), G4 Power Mac (all models except Cube) or G5 (tower, PCI model only) computers, with a spare PCI slot, running Mac OS X 10.2.6 with AirPort installer, or Mac OS X 10.3 Panther, 10.4 Tiger & 10.5 Leopard.
Installed the card in an open slot and Airport setup assistant does not find it. The lights on the card are dark and it just is not working. So far the seller has not responded to my emails. Does anyone have any ideas what I can do to get this thing running? Thanks

What model G4. You need to add this info to your Apple Discussions profile.
What is the make/model of the Airport card?
 Cheers, Tom

Virtual Smart Cards - Enroll On Behalf Of

Hello There!
Here's the scenario:
- Windows 8.1 Laptop with TPM 1.2
- Windows 2012R2 CA
- Windows Enrollment Agent Workstation
Steps:
1) New VSC is created on laptop
2) Admin RDPs from laptop to trusted workstation and enrolls the VSC for the user
3) The user logs into the Laptop and RDPs into a domain joined machine. He gets this error:
The difference between a USB Smart card and the VSC is that when I plugin the USB one, the certificates are copied in the user certificate store. This does not happen with the VSC.
How can this be fixed? Is there a way to virtually unplug and re-plug the VSC so that the OS will copy the certs in the user cert store?
What am I missing?
Thank you,
Claudio

Hi,
Glad to hear that the issue is solved!
Thank you very much for sharing, your solution is very beneficial to other people who have similar issues.
Please feel free to let us know if you encounter any issues in the future.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Replacing the glossy screen with a 3rd party anti-glare or matte

I had my credit card ready to purchase 2 iMacs (finally rplacing our two G5's), until I realized that the anti-glare option with the 15" and 17" MBP would not be carried over to the iMacs. So I was wondering if anyone know of a third party with an option to replace the glossy screen with either a matte or an anti-glare screen. Would this void any warranty?

Open letter to Apple:
Let me first say, I'm a long-time, loyal Mac user (and defender). My first experience with Apple was in elementary school - on the Apple IIE. I created a game using DOS code in grade 5.
My father was a high school teacher and brought home a Mac Plus when I was in high school. The "Paint" program that it came installed with initiated my humble beginnings as digital designer - even on the small black and white screen, with it's limited capabilities, I could see the potential. We were always a Mac family. When my mother finally retired, I talked her into getting the same 24" white IMac I currently have, because that way I could walk her through the setting up and use of it, and now we can skype each other and it's like she's here in the room with me, not a whole province away.
I even had a Mac as a single mom struggling as a full time Communication Design student at Emily Carr University of Art and Design. My young daughter and I lived off my student loans, but they weren't enough to buy a Mac, so I asked my dad to co-sign a student line of credit so I could get a Mac to be compatible with the computers at school. This was the only way I could take my homework home and work while my daughter slept. I sacrificed a lot to have a Mac. We sacrificed.
Skip ahead about a decade, I have my own small graphic design business, I currently have 3 Mac computers: I have a 24" white Imac as my main business tool; I have a titanium laptop for meetings and presentations, and a white Macbook laptop that my high school-aged daughter uses for school and socializing.
I am now at the point in my growing business that it is finally time to upgrade all of my equipment. I've been excitedly holding out for the newest Imac release. I went in to our local BestBuy a few weeks ago to buy my new 27" fully loaded Imac (hey I've worked hard, why not splurge a little?) As I walked up to the Mac display and finally laid eyes on my long awaited dream machine, all I could see was the shocked and betrayed look on my face reflected in the shiny surface of the screen. I nearly cried, I was so disappointed. All I could think was "How could you? "
What is the point of having the shiny screen? I feel so betrayed, so foolish, for sticking with Apple through thick and thin for nearly a quarter of a century. I have invested thousands and thousands and thousands of dollars in Apple products, peripherals, and MAC compatible software for all of my Macs. Adobe CS3, Microsoft Office, 3rd party applications, Mac compatible fonts, and even games. I have purchased protection plans, extra RAM, home insurance and back-up devices for my Macs. I was invested in you, Apple. So what now? Will my hard earned savings now go toward buying the new PC software needed to convert my business to PCs?
The graphics industry, for a large part, has kept Apple going all these years. We have paid the premium for our Apples, and we have just been stabbed in the back by Apple. On behalf of the entire graphic design community in North America, Apple, please offer us a matte screen option on all your new computers.

Communicating with a 3rd party system using webservices

Hi all,
I have a scenario
3rd party <-> XI<->CRM.
here im using SOAP between 3rd party <->XI, xi<->CRM im using ABAP proxies.
scenario 1. 3rd party would send messages(client request) to cRM to get some data. CRM has to respond for that.
scenario 2. CRM would request the 3rd party to get some data, then 3rd party would respond.
scenario 3. there is no request from 3rd party but crm has to send the data.
So 3rd party would communicate using webservices sends the request to cRM. if there is any request from cRM then 3rd party have a webservice to serve.
My question is
1) for cRM side i should create a webservice? if i create this where shold i create? i mean i should put this webservice on WAS of CRM or on XI ? If i create this webservice and put on CRM WAS, could this communicate with XI by using ABAP proxies? when CRM sends a request to 3rd party, to send this i should create another webservice ?
could you please anyone tell me about this?
thanks a lot in Advance

Hi,
<i>for cRM side i should create a webservice? if i create this where shold i create? i mean i should put this webservice on WAS of CRM or on XI ? If i create this webservice and put on CRM WAS, could this communicate with XI by using ABAP proxies?</i>
As to your first question, you dont have to create webservice on CRM side, all you have to do is to define an outbound interface in XI, and generate proxies for that outbound interface in CRM.
<i>when CRM sends a request to 3rd party, to send this i should create another webservice ?</i>
You havent specified who the 3rd party is DataBase/R3/etc. Let us assume the end system is truely external from your landscape. if the 3rd party provides you with a webservice, you can import taht webservice into XI and use it as an inbound interface.
Hence, you would then map the outbound interface from CRM-> XI to your inbound interface XI->3rd party.
3rd party provided webservice could be written in java/.net.
Naveen

Can I use a USB camera with the 3rd party USB camera software and share screens?

I want to do more than just use a USB camera w/iChat (or ichatusb). I also need to be able to initiate screen sharing between two computers. Specifically, I will use iChat with an insight built in camera on my end, and the other person will be using an iMac G5 PPC using a USB camera and the 3rd party USB software for USB ichat support.
My question then is am I able to request screen sharing (taking over their screen) from my ichat/fw combo to their ichatusb/usb combo?
thanks
dc

Hi,
The Cameras don't come into this at all. (But iChat and OS versions do)
Each end needs iChat 4 or higher.
Go to the Video menu and Enable Screen Sharing (Selecting toggles a tick On and Off (Tick Present is ON) )
Highlight Buddy in list and use the Screen Sharing icon at the bottom of the list (interlinked rectangles).
The G5 could be on Leopard (iChat 4) and be using a USB 1.1 camera that would need iUSBCam (formerly iChatUSBCam) as well as the Camera manufacturers Software.
iChat 3 (In Tiger OS 10.4.x) on the G5 with a USB 1.1 camera, Software and iUSBCam may well offer a Screen Sharing option (Or rather Desktop as Video Feed) in the iChat > Video Menu and that will not work
However if the G5 has USB 2.0 ports (not the Keyboard additional ports) then if it is up to OS 10.4.9 it can use a UVC Camera for Video Chats (UVC = USB Video Class No need for Additional Drivers) but Screen Sharing will still be an issue due to the iChat version.
IF the G5 is still on OS 10.4.x then you will have to use a third Party VNC app at both ends (And run a iChat Audio Chat along side)
9:33 PM Friday; September 2, 2011
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb( 10.6.8)
 Mac OS X (10.6.8),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

How to Integrate HRMS with a 3rd party application via restful web services?

Hi All,
I am new to Oracle network and wanted to know how we can integrate Oracle HRMS with our external website via web services. I have already looked in PL/SQL APIs but that is not what i need but i want the integration to be web based like SOAP/XML or JSON.
Thanks,
Aqeel

Hi
Yes we have implemented SSO with 3rd party application running on IIS server (running on Windows 2003 server).
Here you go the link
http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/security/s-u/using sap logon tickets for sso to microsoft-based web applications.pdf
forum
/thread/11711 [original link is broken]
DEMO
https://www.sdn.sap.com/irj/sdn/developerareas/ep?rid=/webcontent/uuid/110ff05d-0501-0010-a19d-958247c9f798
Cheers
Jawahar Govindaraj
PS:Reward pts

Virtual Smart Cards with a 3rd Party CA

Similar Messages

Maybe you are looking for