Smart cards (Common Access Cards) & Unified Communication

I have a customer that utilizes CAC for authentication. Does anyone have any insight with utilizing either smartcards or CACs for authentication? How does this affect applications such as Personal Communicator, IP Communicator, and the CCM User page. Just trying to obtain caveats and gotchas?
Thanks for any assistance or feedback
T. Muhammad
Systems Engineer
PC Connection

Hi @go1836,
Welcome to the HP Forums!
To get your issue more exposure I would suggest posting it in the commercial forums since the HP Color LaserJet 2840 All-in-One Printer is a commercial product. You can do this at HP Enterprise Business Community.
The support page for your product may be helpful in the meantime:
HP Support Center.
I hope this helps!
RnRMusicMan
I work on behalf of HP
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos Thumbs Up" to say “Thanks” for helping!

Similar Messages

Common Access Card utilization

I’ve been ask what it would take to migrate from a windows web IIS sign-in from a username/password to the Common Access Card used throughout the government. I’m somewhat familiar
with configuring IIS and have loaded the system certificate and enabled the require client certificate within IIS. The task would be to assign/replace individual AD accounts with their individual certificates.
Can someone touch base on how this could occur in a windows 2008 server environment?

Admittedly, our smart card documentation is a gap. I am off next week, but if you want to work together to get this stood up on your lab box, ping me at ostiguy at netapp dot com , and we can try to get together the week after next Matt

Error while Accessing Smart Card using Open Card Frame Work

HI
Using Open Card Frame work I am trying to access GemAlto provided Smart Card (java card). I downloaded the Open Card Frame work from http://www.openscdp.org/ocf/download.html.
I am executing a basic program to access the data stored in smart card.
public static void main(String[] args)
                    System.out.println("reading smartcard file...");
                    try {
                    SmartCard.start();
                    CardRequest cr = (FileAccessCardService.class);
                    System.out.println("calling waitforCard");
                    SmartCard sc = SmartCard.waitForCard(cr); //Error comes after this line
                    System.out.println("After waitForCard called");
                    FileAccessCardService facs = (FileAccessCardService)
                    sc.getCardService(FileAccessCardService.class, true);
                    CardFile root = new CardFile(facs);
                    CardFile file = new CardFile(root, ":c009");
                    byte[] data = facs.read(file.getPath(), 0,
                    file.getLength() );
                    sc.close();
                    String entry = new String(data);
                    entry = entry.trim();
                    System.out.println(entry);
                    } catch (Exception e) {
                         e.printStackTrace(System.err);
                    System.exit(0);
The content of the opencard.properties are :
          OpenCard.services = opencard.opt.util.PassThruCardServiceFactory
OpenCard.terminals = com.ibm.opencard.terminal.pcsc10.Pcsc10CardTerminalFactory
OpenCard.trace = opencard:5 com.ibm:4 opencard.opt.database:6
After the line SmartCard sc = SmartCard.waitForCard(cr);
the program is expecting a card to be inserted but while inserting Smartcard the following error message come :
          calling waitforCard
          [ERROR    ] com.ibm.opencard.terminal.pcsc10.OCFPCSC1.OCFPCSC1.SCardConnect
--- message
--- thread Thread[Thread-0,5,main]
--- source com.ibm.opencard.terminal.pcsc10.OCFPCSC1@2e7263
[ERROR    ] com.ibm.opencard.terminal.pcsc10.OCFPCSC1.OCFPCSC1.SCardConnect
--- message Protocol = 0
--- thread Thread[Thread-0,5,main
--- source com.ibm.opencard.terminal.pcsc10.OCFPCSC1@2e7263
Basically the error is coming from the SCardConnect function of OCFPCSC1.cpp file.
Please reply to my mail id if any body has any idea how to resolve this issue.
MAIL-ID : [email protected]
With Regards
Swarup
Finacle Archie
Infosys Technologies Limited,Bhubaneswar,India

Sounds like an issue that has to do with JavaScript Origin policy. You'll have to use Domain Relaxing for this. Read all about it here:
http://help.sap.com/saphelp_nw04/helpdata/en/59/87b54064c2742ae10000000a155106/frameset.htm
here:
http://help.sap.com/saphelp_nw04/helpdata/en/5e/473d4124b08739e10000000a1550b0/frameset.htm
and here:
http://help.sap.com/saphelp_nw04/helpdata/en/cb/f8751d8c6b254dac189f4029c76112/frameset.htm

Need advice for an application that restricts access to other applications using a smart card

Hello everybody,
I am developing a system that uses a smart card reader attached to a USB port of a PC.
What the system should provide is:
When computer boots up and shows the users login screen, a user, previously registered, can use his smart card to access the system, instead of entering his password
Once the user is logged in, when he tries to launch an application, which has previously marked as "secured", a dialog box is shown indicating that the user has to present his smart card. If the smart card has access to the application, the application
is launched, otherwise an error message is shown to the user and the application is not executed.
I develop in C++ and C#. I have already created a library (in Visual C++) that manages the smart card reader and provides the card presented to it.
Now I am developing the applicastion (in C#) that will configure the security (assigning cards to users and applications).
Concerning this, I have 2 questions regarding each point above:
Is it possible to create the centralized application that lists all users and allows to assign cards to them? Then, when the users login screen is shown, the system must access that data before logging in, so that it can check which card was presented and
what user it corresponds to. I have seen in laptops, that have embedded fingerprint readers, a user must login to his account first and then he can register his fingerprints. In fact, what I need to do is something similar but with smart card reader instead
of fingerprint reader. So, perhaps, user must login into his account first and then he will be able to add his card and store that information somewhere (in windows registry maybe).
How can I launch my application when other application is executed but before its interface is actually shown? this is similar to what antivirus programs do, because they check the executable before it is actually ran. What is the best method to address
the application? by executable file name? process name? or other? if the best is by process name, how can I know the process name without actually running the application?
Well, that is all what I need to do. Please advice regarding this subject.
I look forward to hearing from you,
Best regards,
Jaime
Powered by C++

> what was the guidance?
1. Research other software that does similar things (not just exactly the same) as you need. If you like something in their solutions, copy it :)
The only software I know that does that is an antivirus, but I am unlucky to find some code in c++ that allows to intercept the program execution before actually executing it.
2. If a kernel driver would fit in your solution, go for it (google for what is available for free, or find a consultant to write it for you).
There are a lot of information about kernel drivers, but the question is, is that really the solution?
Otherwise, you can just hide the application from user's reach and substitute the executable in shortcuts, etc. to run your program instead.
Definetly this is not the way to go
What is the best method to address the application? by executable file name? process name? or other?
By executable file name, like in the Windows Applocker, I think. Processes do not have names (they are artifact of Task manager and debugging tools, to represent the processes for user somehow). Or, only by the filename part of the full path.
I agree with that
if the best is by process name, how can I know the process name without actually running the application?
When the user runs the application, the driver will detect this and do its magic.
I have found this page: http://stackoverflow.com/questions/3556048/how-to-detect-win32-process-creation-termination-in-c. They mention WMI, but I will study it tommorow... it is so late for today :-)
Regards,
-- pa
Regards
Jaime
Powered by C++

How to use common access card (CAC) reader with Mozilla Firefox?

Please provide information on how to update Mozilla Firefox settings to allow common access card (CAC) reader digital certificates, thank you.

Try this thread:
* [/questions/752709] Having problems configuring FireFox to use a CAC reader

Does apple make a common access card reader?

Does MAC make a common access card reader?

No but any third party card reader will work fine. All new iMac's come with a SD card reader alreader however if you use CF or Sony cards as mentioned any reader should be fine.

Connect smart card reader over usb and access digital signature certificate

Hi,
I got digital signature certificate stored in a smart card.I places smart card into card reader and plugged usb port of server.
I can see card reader in windows environment.My problem is to connect card reader and access digital signature certificate using java code.
I thinh it needs javax.smartcardio but i did not find necessary jar file for jdk 1.5.xx.
1- Where can i download jar fiel for javax.smartcardio for jdk 1.5.xx
2- Is there a blog or forum thread to help me to use smart card over usb?
Thanks.

One of the beauty of Java is that when the Java VM does not let you do something (here: accessing a Smart Card), there is no way that a purely Java solution will add this functionality.
Hence, what you ask simply can not be done in pure Java (1.)5. Some machine-specific non-java code is required. And you did not specify your target.
Unless a jar file could contain machine-specific code (I don't know if this is the case, and I never made one such jar file), there seems to be no way a jar file could help.

Accessing smart card through internet

I want to make an application that will do the following : I want to have a webpage(for example an order form at an e-shop site) to access the smart card at a remote computer over the internet (the customer's pc) and get some information from an array in the card (e.g the shipping address and his name)....Is it possible to do that or the security restrictions (java applet restrictions) will not allow me to ? If so has anybody any ideas of how it could be done? The same opencard commands (e.g sendCommandApdu() ) work for accessing a card through the internet or do I have to use anything different???Thank you ...

Sir,
Even I am looking for a similar application Online Banking application
But in that case the bank has to authenticate the user using some info that the card stores
How does the bank achieve the same?
What is the cards role in this regard
Where does cryptology come into this
I would be happy top know these details
Regards
Kumar

Controlling Access to OS with Smart Card

Does any one know if there is a program built within OS X (Tiger) or either a third party program that will allow a machine running Tiger to be set up to only be accessed when using a "Smart Card" (similar to the system used on a lot of government machines)?
Also, where would a person obtain the Smart Card to use with the program. Thanks!!!

You might look into a hardware product called "SecuriKey":
http://www.securikey.com/mac_security.html
=
There was a MacWorld review a few years ago of what might have been an earlier version:
http://www.macworld.com/article/42927/2005/02/securikey.html

Accessing to Smart Card Readers PC/SC with Labview

Accessing to Smart Card Readers using Labview
This program is an example that how access to Smart Card Readers (PC/SC) to get some information about a SIM Card, this program is not debuged yet and have some issues.
The point is wear the winscard.dll where all the function to access to this PC/SC readers are defined, I don´t have enought skills as programmer, but I think that it could be help somebody to develope
applications with Labview and SIM cards (GSM, USIM, etc..)
Regards
Attachments:
GETTING_ATR_FROM_SIM_CARD_GSM.vi ‏118 KB

Hello!
Let me first understand your question, Do you want to know wich of 22 DLL´s, that you have, can you use to sent an AT command to retrive the MSISDN on SIM Card?
If you answer is yes, you should be identify all the functions in your dll and found wich of them ara used to sent AT commands like SMS send, SMS retrive, etc.., the same structure of this commands you can use to send another AT Command.
The number should be record on the SIM Card.
AT+CNUM Subscriber Number
Description:
This command returns the MSISDNs related to the subscriber (this information can be
stored in the SIM or in the ME). If subscriber has different MSISDN for different services,
each MSISDN is returned in a separate line.
Test if the command
is supported
AT+CNUM=?
Best Regards.
Enrique Ramos
Telcel Mexico

How access to Smart Card Readers using Labview?

I´am trying access to Smart Card Readers by Labview, but I have problems.
I want to read SIM card GSM using Labview.!
The file winscard.dll has the functions to access, but I dont have skill with "Using External codes in LabView".
In MSDN library there is the specification about the functions for winscard.dll
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secauthn/security/smart_card_authentication.asp
When you install a driver for some smart card reader you access to it by winscard.dll.
Att. Enrique

Finally I can acces to the smart card readers (PC/SC) with Labview,   this is the first part where I can establish the context and realease it, and I can get the first name of my list of PC/SC readers that I have connected to my computer.
I was wearing the "Call Library Function" for winscard.dll
For Establish the context you need :
    function name : SCardEstablishContext
Calling conventions : stdcall (WINAPI)
function prototype :    long SCardEstablishContext(long SCARD_SCOPE_USER, long NULL1, long NULL2, unsigned long *hContextHandle);
function name : SCardReleaseContext
Calling conventions : stdcall (WINAPI)
function prototype :  void SCardReleaseContext(unsigned long hContextHandle);

Access to smart card reader on Win 8.1 RDP Host

Hi,
I have a customer that has a couple of Windows 8.1 Pro computers, that has a smart card reader in the local keyboard.
Until a few months ago, they could RDP to the desktop computer from a RDP client such as another Windows PC, a Mac or a mobile device.
The problem is now that when accessing the desktop computer (with the smart card reader keyboard) from a RDP client, the smart card reader is not available in the RDP session anymore. This prevents them from logging on to an application in the network that
requires their smart card.
Can someone perhaps point me in a direction where this can be solved, either with the MS RDP host or with some 3rd party RDP host applications?
(Teamviewer or similar remote support applications works, but that is not what the customer want...)
Since it worked like a charm up until 2-3 months ago, there must have been some update to Win 8.1 that prevents this by default?
Thanks in advance,
/Mikael Forslund

Hi Mikael Forslund,
I am supposing you attempted to use smart card reader connected directly to Remote Desktop terminal. Basically your RDP session should redirected smart card reader to the client side and will not see readers connected to the host side
because enable Safety equipment such like smart card reader will cause highly insecure and that is not by design.
We suggest using smart card reader on local RDP client for your issue.
“The reverse is also true; if you RDP into a session from the start you will never see any local smartcard readers as Winscard will detect it’s running in an RDP session and no calls to Winscard will ever reach the local PC/SC layer –
everything will be redirected to the connecting client.”
Quote from this TechNet article
http://blogs.technet.com/b/instan/archive/2011/03/27/why-can-t-i-see-my-local-smartcard-readers-when-i-connect-via-rdp.aspx
Similar case has been posted and for your reference
https://social.technet.microsoft.com/Forums/windowsserver/en-US/47972083-b9bd-49fd-8708-b296af81bda3/usb-smart-card-reader-and-smart-card-connected-directly-to-remote-desktop-server?forum=winserverTS
Regards
D. Wu

Signed Applet to Access Smart Card Reader

I am trying to develop an applet that will access a smart card on the client's side. The applet will need to load the PKCS#11 library(.dll) from the client side.
What is the most secure way to implement this design?
1 solution I am think of is to use Java Web Start which will download the applet onto the client desktop. Is this the right way?
Is there a solution where the applet can run in the browser and access the smart card without downloading the applet?
Thanks.

This is a duplicate of this and is probably better dealt with in the WebStart forum. I'm locking this thread.

Common Access Card Viewer on MacBook Pro

Has anyone here been able to get the Common Access Card Viewer to
work on a MacBook Pro running 10.4.7?
Any pointers?
Andy

Orwellian?
For example, remember that a VA laptop with lots of SSNs that was stolen recently? If that machine required one of these cards to login, a bad guy would have considerably more difficulty getting access to those SSNs. Lots of Vets would no doubt appreciate the extra security.
Of course, there are other ways. Encrypted disk images, for example.

Is there a way to make the iPad Common Access Card (CAC) enabled?

Is there a way to make the iPad Common Access Card (CAC) enabled?

There are two current readers with iPad support, with at least two more expected in the next couple of months.
Be careful of what you refer to be "CAC enabled". The true answer to this depends upon what your software requirements are.
Please refer to http://militarycac.com/mobile.htm#iPhone_and_iPad as a good reference source.
Good luck!
Bill

Smart cards (Common Access Cards) & Unified Communication

Similar Messages

Maybe you are looking for