Smart Card Problem with AnyConnect over RDP

Hello,
For ASA 5545, v-8.6(1)2 and AnyConnect v-3.1.0165, I'm trying to start an AnyConnect client tunnel on a remote RDP (both ends Windows 7) machine and am having problems. The RDP is configured to proxy smart card devices which generally works fine. I'm using current SafeNet eToken with current client software. When I start AnyConnect from client machines (no RDP), the tunnel opens with no problem using the smart card. When I try to start the tunnel on the remote machine via RDP, I'm prompted for cert selection and smart card PIN, but get a popup from AnyConnect: 'VPN connection terminated, smart card removed from reader'. When I try to start the tunnel via RDP but use the ASA web server to start, the tunnel starts up fine with the smart card.
For the problem condition, the Windows event log on the remote RDP machine shows 3 entires (see below) wrt acvpnagent show smart card removal errors but the USB device is always inserted. Also, in investigating, I changed the client profile 'server list' config to SSL instead of IPSec. Same failure but the popup does not show.
VPN connection terminated, Smartcard removed from reader.
Description: VPNMGR_ERROR_SMARTCARD_REMOVED:A smartcard required for the connection has been removed
Thanks in advance for any assistance.
Mike

This can be resolved by going to services and disabling Smart card

Similar Messages

  • HT4993 i been having sim card problems with my iphone 5. am i the only one?

    i been having sim card problems with my iphone 5. am i the only one?

    Hello,
    I'm also had problems with Iphone 5 , it read no sim card, i solved problem by removing sim card and cleaning with alcohol and q-tip and installing back.
    Shut down phone.
    On the side of phone , you will see a small pin hole, insert paper clip and sim card will come out, be careful to do it over a clean towel as not to let drop on floor, make sure your hands clean while doing this.
    Insert sims card back and turn on, it should work again.
    Good Luck.

  • Smart Card Problem in Java with server

    Hi everybody.I use smart card authentication to sign my web application which was deployed in apache tomcat and I use servlet & jsp fro developing this web application.When deploy application on local machine there is no problem.
        public String getInfo(String password) {
            String certInfo = "";
            try {
                String configName = "C:/smartcards/config/pkcs11.cfg";
                String PIN = password;
                Provider p = new sun.security.pkcs11.SunPKCS11(configName);
                Security.addProvider(p);
                ((SunPKCS11) p).logout();
                KeyStore keyStore = KeyStore.getInstance("PKCS11");
                char[] pin = PIN.toCharArray();
                keyStore.load(null, pin);
                Enumeration aliasesEnum = keyStore.aliases();
                String alias = (String) aliasesEnum.nextElement();
                X509Certificate cert = (X509Certificate) keyStore.getCertificate(alias);
                certInfo += cert.toString();
            } catch (Exception e) {
                System.out.println(e.getMessage());
            return certInfo;
    The preceding method return String which was stored in smart card when I pass password of smart card.If password wrong load failed.
    Then I deployed this web app in the server.When I run this app everything is ok when I also remote desktop connected to server.When I close RDP I get Token has been removed exception on web server.How can I solve this problem.I want to also sign to app without remote desktop connection.

    Use PreparedStatement and SimpleDateFormat classes
    http://onesearch.sun.com/search/onesearch/index.jsp?qt=%2BPreparedStatement+%2BSimpleDateFormat+&qp=siteforumid%3Ajava48&chooseCat=allJava&col=developer-forums&site=dev

  • Pls help me with smart card problem

    Hi,
    currently, i'm developing a system for my final year project. i've developed a webpage in PHP for clinic management. i also implement smart card in my system. the point of it is to make it easier for both parties - doctor and patient. each time patient comes to receive treatment, doc will check patient's smart card on previous drugs prescription. so then, doc will update it based on the treatment given on that day.
    the problem is, how i want to transmit the data from smart card to be displayed in the php page? maybe i should use applet but i don't know how.
    does anybody has applet source code on transmitting data from smart card to php page?
    i wud b really appreciate it...... thanks in advance.

    Have you checked the Schlumberger web site?
    What do you mean by "parsing from applet to php"? Parsing really isn't a data transfer method except maybe in a very tenuous sense.
    And do you really mean an applet (a small program run on the client and embedded in a web page) or are you using it as shorthand for any java program?
    If an applet, I suppose you could:
    1) use javascript to connect the applet to the web page, which would just happen to be created using PHP. So it would be all client-side operation.
    2) use HttpURLConnection (or, God help you, direct socket connections) to connect to a web server and interact with PHP to give/get data. In this case it would be client/server behavior, but the applet would have minimal interaction with the PHP page it's embedded in.
    3) Make it really fun (i.e.: complicated) by using javascript to connect to the page, and then use AJAX to connect to the server. I have no idea whether that's even possible using PHP.
    Maybe there are other options I haven't thought of.

  • Smart Cards slow with Sun Ray Windows Connector

    I'm succesfully using smart cards to log on to Windows 2003. But the problem is that it's very slow!
    If i enter a wrong pin code, its fairly quick to respond with an error but when entering the right one it takes like 13-15 seconds to log on. The smart card slot on Sun Ray 2 is flashing all that time, so it seems like it's reading the certificate takes that long?
    Any ideas how to make it quicker?

    I have done the same setup with SunRay 170.
    Approx the same delay is experienced with my setup.
    When I meet my Card Vendor next time around I will ask about
    how many times the CERT is read.
    The Sunray 2 is faster , alot faster than sunray 170 so the delay
    must be the speed that card transactions can be performed.
    //lars

  • Bandwith Problem with Flashes over Terminal Server

    I get huge problems with viewing flash on Citrix Terminal
    Server. Everytime a user opens up a website with Flashes in it, it
    consumes the rest off the bandwith. This slows down all other user
    on the site. This happens over RDP and ICA Connection. Microsoft
    dont want to have a solution for this problem. they know it but...
    . The same ist for Citrix. I hope that Adobe can give me an
    acceptable solution. What can i do, to tune up Flashes over the
    Terminal Server?
    Thanks a lot for your help.

    Leo,
       What is your Vc version ? Also pls do check the SAP note 886209 if it helps in any way .
      We had some deployment issues which were fixed using this .
    Rgds

  • Smart Form problem with address layout

    Hello everyone,
    I need your help please for a smart form problem. We need the address layout for great britain with street1, street2 etc. but currently street2 is alligned before street1.
    We are using the FM ADDRESS_INTO_PRINTFORM (SAP standard address node) and according to the documenation the layout for GB is different as we see it currently.
    We have checked the sold-to and all contact persons, they have as country GB and language EN maintained.
    In customizing for address screen layout there is nothing chosen (tested to set up Europe, but did not change anything).
    For the customizing 'specify my countries...' we have maintained GB as country with the address layout key 006, vehicle country key GB and language key EN.
    For the described setting shouldn't there be designed the address in our smart forms according to 006? Anyhting in customizing we missed?
    Thanks a lot for your answers.
    Torsten

    Hi,
    Try to use line priority of FM, below is a brief of documentation. You can read it more in FM documentation:
    Control Parameters
    See also the parameter documentation.
    ADDRESS_TYPE - Address type (from 3.0C)
    There are three types of address:
    Address type '1': addresses of firms or organizations; the address
    structure which is used in most SAP applications as 'Address'.
    Address type '2': address of a person
    Address type '3': work address, usually the address of a contact person
    in a company
    The default value SPACE for the address type is handled like type '1',
    and is needed for the upwards-compatibility of the function module.
    Which parameters are used for which address type is explained in the
    ADDRESS_TYPE parameter documentation.
    The three character "address layout key" of the recipient country (LAND1) controls which of the available country-specific routines is used to format addresses for the country in question. This key is stored in field T005-ADDRS and is entered in Customizing under Global settings -> Set countries -> Define countries, on the detail screen under "Address layout key".
    Keys for customer routines in the SAP enhancement SZAD0001 can be
    maintained via the transaction SM30 (extended table maintenance),table
    name T005A, in the customer name range, and be assigned in country customizing.
    The address attributes are passed in the structures ADDRESS1 (type 1), ADDRESS2 (type 2), ADDRESS3 (type 3) or ADRSWA_IN (type SPACE).
    NUMBER_OF_LINES (ADRSWA_IN-ANZZL)
    The number of lines available for the address layout. If the number of
    lines is not sufficient for the complete layout of an address, then
    lines are consecutively suppressed according to the rules of the country in question. Use the parameter LINE_PRIORITY (ADRSWA_IN-PRIOR) overrules the standard sequence in which the output lines are to be suppressed.
    LINE_PRIORITY (ADRSWA_IN-PRIOR)
    If not equal to SPACE, this field overwrites the standard sequence in
    which the lines are suppressed if the available number of lines ANZZL is
    insufficient.
    The standard sequence is defined as follows:
    Type 1:   'AP43HRT7I86LC2BS5O'       (GB:  'APRT4327I86CBS5LO')
    Type 2:   'APHRT7I86LCBS5O'          (GB:  'PRT7I86CBS5LO')
    Type 3:   'APF43HR7I86TLC2BSND5O'    (GB:  'APRT4327I86CBS5LNDIO')
    where (if they occupy a line of their own):
    A = Title
    P = Mandatory empty line 1
    F = Function of the contact person in the company
    4 = Name 4
    3 = Name 3
    H = Different city
    R = Region
    T = District
    L = Name of country
    C = Postal code
    T = District
    7 = Street 3 (field STR_SUPPL2)
    I = Street 5 (field LOCATION)
    8 = Street 4 (field STR_SUPPL3)
    6 = Street 2 (field STR_SUPPL1)
    L = Country
    C = Postal code
    2 = Name 2
    B = PO Box
    S = Street or PO Box
    5 = c/o name
    N = Name (and title) of a person
    D = Department
    O = City
    Which of these attributes are available for maintenance can vary. All
    fields exist in Business Address Services.
    STREET_HAS_PRIORITY (ADRSWA_IN-WAREN)
    'X': Street has priority over PO Box (delivery address for example)
    ' ': PO Box has priority over street. This is the default value.
    regards,

  • CAC or smart card use with Oracle database and web server

    I've been asked to smart card (CAC) enable our Oracle web server and database access. We currently use CAC to access many of our other applications.
    Where can I find the following information
    Oracle software required (and is it an additional cost)
    How to integrate Oracle App server (web server) with CAC.
    How would I need to change the database users accounts to be CAC enabled rather than database users accounts.
    Thanks
    steven jackson
    [email protected]
    614-692-9768

    Virtualisation is not certified for Oracle RAC on Windows.
    +Certified Software on Oracle VM [ID 464754.1]+ note states:
    Oracle Real Application Clusters (RAC)
        Oracle 10.2.0.4 and up (10gR2) and 11.1.0.7 and up (11gR1) and 11gR2 RAC for Linux x86 and Linux x86_64 certified on Oracle VM
            Guest OS: Oracle Linux 5.1 (and above) RHEL 5.1 (and above) for Linux x86 / Linux x86_64
            Paravirtualized (PV) mode only (Guest OS and drivers)
            Only supported on Oracle VM 2.1.2 and above
            Live-migration of an Oracle RAC VM is supported with Oracle VM 2.2.1 and above.
            Previous versions are not supported. Please refer to this link for best practices.
            Over-committing CPUs is not recommended, but supported with the following restrictions:
                The total amount of VCPUs allocated to guest domains (running Oracle RAC guests), should not exceed
                two times (2x) the amount of real CPUs / cores in the Oracle VM server.
                The amount of VCPUs allocated to a single guest domain should not exceed the amount of real CPUs /
                cores in the Oracle VM server.
                Maintain Oracle VMs default VCPU allocation for dom-0: Oracle VM will allocate 1 VCPU for each real CPU or core to dom-0.
                CPU pinning is only recommended for hard partitioning. If no hard partitioning is required, CPU pinning should not be used.
            Static support only (dynamic support is being planned):
                Dynamic resizing of guest virtual machine is not supported (VCPU, memory and I/O)
                Virtual Machine Pause/Restore of an active Real Application Cluster virtual machine is not supported.

  • Unable to pair BB Smart Card Reader with Pc/Laptop

    Hi, I have 2 new BB smart card readers (SCR) and Im trying to pair with the PC and I can not. The SCR software can not detect the SCR. I put the ID of the device on the software and is trying to looking for it but can not. It says "Unable to connect to the specified Blackberry smart card reader". I have another SCR and I don't have problems to pair with the computer only with the new ones. The SCR have the last OS. Do you know what could be the problem? I think is a bug of the new SCR.

    mzamora wrote:
    Andy, may be nothing so where can I post it? Is there a general discussion?
    Hello,
    if I were you, I'd post in the "General Blackberry Smartphone Functions and Features" forum.
    The search box on top-right of this page is your true friend, and the public Knowledge Base too:

  • Smart Card application with EJB?

    Hallo
    I have the following problem:
    I have to write an application which should be accessible from the internet. The whole application has to be on the server. Every user who wants to get access to the application has to insert a smartcard into the Reader who is installed on his local system. The application has to read some information (username or password for example) from the card and to prove if the user is allowed to start the Application.
    Does anybody has an idea how to realize this? Is it possible to realize this with EJB or do i have to use an other technology?
    Thanks for your answers

    Well i did not use the java smart card technology. I used the Java native interface to implement the classes who have to read from the card. I got an api dll from the producer of the smart card. So i used the Java native interface to realize the logic of the smartcard application. This part of my programm is written in c++. The problem is that the whole programm is on a server but for getting access to the smartcard reader the dll s (the api dll from the producer and my dll for the jni) have to been installed on every client......
    You said that i have to write a swing client who picks the information from the smartcard and sends it afterwards to the enterprise system. Is there no other possibility to solve this problem without writing a swing client ?

  • Network card problem with Mobo make the computer crazy!!!

    Im using a msi 745 Ultra version 10/cpu xp2400/basic graphics card/40gb HD, 256mbs of drr
    I have tryed 2 networks cards both with the same results & even changed mobo & ram/graphic card/HD.
    The computer seems to work fine untill i decide to put in a NIC.
    It starts to post the wrong processor speed/screen decides not to display sometimes & takes a little longer to boot into windows. It will also some time crash when i turn on the computer. If i try to save something in the bios it will then reboot & then try to boot of the floppy drive.HD / CDrom drive but will not find them.This has happend on both mobos.
    This is a very odd problem im getting need some help ASAP.

    Sorry Bakes...folks aren't just waiting arount to help you. Expecting an answer in 2 hours is placing to high of an expectations on a user to user help forum.
    No one here works for MSI, we are all users, just like you.
    If you have not seen a reply, then there are several reasons that may affect why there has been no reply.
    No one knows, or can offer o good answer to you question.
    The question is too general and you did not supply the necessary information someone might need to even begin helping you. I have provided the basics on what we need at the top of this forum.
    No one may be familiar with your motherboard's chipset, perhaps someone is but they have not visited the forum lately.
    I can give only some general tips to consider for the time being.
    Some incompatabilities may exist with a certain NIC card.
    Check PCI slot IRQ sharing conflicts. Typically I stay to the middle slots and avoid the first and last. You may have to power down, move the card to another slot, and power back up. Each time checking your IRQ's in either Device Manager or System Information to see that the card is on its own IRQ.
    Improper BIOS settings can cause conflicts.
    Try "Plug and Play Aware OS" set to "No" and let the BIOS manage things or set it to yes and let Windows do it. In most cases it has been recommended to be set to no.
    Upon installation of new hardware the setting "Reset Configuration Data" can be useful in avoiding lockups after POST due to conflicts recognized during "Verifying DMI Pool Data"
    Possible reasons: Hardware change, BIOS settings change, improper connection of IDE cables, corrupt MBR (Master Boot Record) of the HDD (Hard Disk Drive), defective HDD or defective mainboard.
    Possible causes: Hardware incompatibility, virus attack, electric circuitry damage/defect, corruption of data, improper BIOS settings, over-clocking damage.
     *NOTE* Some Chipsets do not support this feature, see manufacturers documentation.
    That's about all I care to share for now.
    Good luck........

  • Problem with mouse-over value on a column chart (by Series)

    Hi.
    First of all thanks for any offered tip.
    I am having a problem with a column chart.
    When I move the mouse over a column it should show a small pop-up (or tip) with the column name (series name) and the value (series value). The problem is that it displays an extra '1' just like the following:
    SeriesName
    1
    X.XXX
    How can I remove the extra '1' and only show the name and the value ?
    The data is populated by series (manually added).
    Mihai.

    Hi,
    Thanks for the tip Shanthakumar KA.
    Yes. It looks like the '1' is coming from the X Axis labels. The chart that I have built does not require any labels on the X Axis, so this was not set (X-Axis labels: Empty). I tried setting this to an empty cell, but the '1' still appears in the mouse-over tip.
    It is very weird. If I leave the X-Axis labels empty, I still get the '1' displayed which is very annoing.
    Are there any solutions for this except the re-building the tip with a label a.k.a. '[customize the mouse over values|http://xcelsiusandme.blogspot.com/2009/07/xm-sample-7-customizing-mouse-over.html].'
    Regards,
    Mihai.

  • Problem with LUNs over Fiber

    We have recently installed a SAN but are having a few problems with the Solaris machines we are trying to connect to it.
    Hardware: LSI SAN with dual controler and 3 trays of 6x73Gb disks. Brocade fiber switch. A Sun V880 and a Sun E420 both with LSI40919O 2gb fiber cards. Both Solaris machines have resonably upto date patch clusters on them.
    I can create volumes on the SAN, create LUNs on these volumes, map them to individual hosts, and (assuming the relevant entries were in /kernel/drv/ssd.conf at boot time) I can see the LUNs when I run the 'format' command on the Solaris boxes. I can label, partition, format and mount slices from these disks.
    The problems occur when I want to delete or change a mapping. When I do this (delete a mapping between a LUN and a host for instance), on the Solaris box no matter what I do the disk changes to "drive type unknown". Running devfsadm (or drvconfg; devlinks; disks) has no effect. The disk is not manually configurable (it's not there after all). Only a reboot (boot -r) will actually remove the incorrect entries.
    Sample output from format:
    Searching for disks...done
    AVAILABLE DISK SELECTIONS:
    0. c0t0d0 <SUN18G cyl 7506 alt 2 hd 19 sec 248>
    /pci@1f,4000/scsi@3/sd@0,0
    1. c0t1d0 <SUN18G cyl 7506 alt 2 hd 19 sec 248>
    /pci@1f,4000/scsi@3/sd@1,0
    2. c4t0d0 <STK-OPENstorageD178-0530 cyl 2558 alt 2 hd 64 sec 64>
    /pci@1f,2000/IntraServer,fc@1/ssd@0,0
    3. c4t0d1 <STK-OPENstorageD178-0530 cyl 3070 alt 2 hd 64 sec 64>
    /pci@1f,2000/IntraServer,fc@1/ssd@0,1
    4. c4t0d2 <STK-OPENstorageD178-0530 cyl 2046 alt 2 hd 64 sec 64>
    /pci@1f,2000/IntraServer,fc@1/ssd@0,2
    5. c4t0d3 <STK-OPENstorageD178-0530 cyl 1534 alt 2 hd 64 sec 64>
    /pci@1f,2000/IntraServer,fc@1/ssd@0,3
    6. c4t0d4 <STK-OPENstorageD178-0530 cyl 1022 alt 2 hd 64 sec 64>
    /pci@1f,2000/IntraServer,fc@1/ssd@0,4
    7. c4t0d5 <drive type unknown>
    /pci@1f,2000/IntraServer,fc@1/ssd@0,5
    It is of course the last drive for which I removed the mapping. I can remake the mapping and the drive willonce again be available. I can add additional mappings and the new disks will be available (again assuming the relevent entry existed in /kernel/drv/ssd.conf at boot time). But any attempt to remove the mappings results in the above situation.
    Sean Timmins

    Have you tried luxadm remove <your_device> ?

  • Smart card logon with third party CA combined with ADFS to Office 365

    Greetings,
    I've been trying figure out how to implement ADFS to Office 365 in MS cloud in our environment, with little luck. I have a working 2012 domain and we are already using smart card logon on Windows 7/8 workstations. Certificates on smart cards are issued by
    3rd party CA. This far every thing is fine and working, necessary root certificates are added to trusted Trusted Root Certification Authorities, UPN suffixes and users' UPNs are set according to UPN on the certificates and users successfully log on to
    workstations with smart cards.
    Now I face the requirement to enable SSOto Office 365 with accounts from our AD. I've been told by our MS partner and Dr. Google that in order to do that user account name (upn) in AD and in O365 need to match. Now the fact that account UPN in our AD is
    not usable in O365 (because it is set to match 3rd party certificate UPN) and I have not found a way to enable smart card log on without changing UPN in AD. 
    Does anyone has experience of such a configuration? Is it possible to use AD federation to O365 at all in our case?
    Best regards, and thanks in advance
    Timo

    On Fri, 25 Apr 2014 09:27:05 +0000, Timo Kallioniemi wrote:
    Now I face the requirement to enable SSOto Office 365 with accounts from our AD. I've been told by our MS partner and Dr. Google that in order to do that user account name (upn) in AD and in O365 need to match. Now the fact that account UPN in our AD
    is not usable in O365 (because it is set to match 3rd party certificate UPN) and I have not found a way to enable smart card log on without changing UPN in AD. 
    Does anyone has experience of such a configuration? Is it possible to use AD federation to O365 at all in our case?
    This is not a general Windows server security issue. You should post your
    question in an O365 support forum.
    http://community.office365.com/en-us/f/default.aspx
    Paul Adare - FIM CM MVP
    Technology is dominated by two types of people: Those who understand
    what they do not manage. Those who manage what they do not understand.
    -- Putt's Law

  • T410 Smart Card problem

    received my T410 last week, played around, but noticed that the smart card reader is not working correctly.
    In Device Manager, the driver is installed correctly as integrated smart card reader.
    But when I insert a smart card, it asked to install driver and failed.
    any advise?
    Thanks.
    Victor

    This is a known problem and i have seen the same thing using Omnikey PCMCIA and USB smartcard readers. I would rather blame the provider of the smartcard and not Lenovo or the manufacturer of the smartcard reader.
    You can read more about the smartcard minidrivers here:
    http://support.microsoft.com/kb/976832
    There are also some workarounds to be found in that article. Take a look at the part that describe how to disable smartcard plug and play using group policy and the part that describe how to disable smartcard plug and play for a specific smartcard.
    -gan

Maybe you are looking for