Smart Cards slow with Sun Ray Windows Connector

I'm succesfully using smart cards to log on to Windows 2003. But the problem is that it's very slow!
If i enter a wrong pin code, its fairly quick to respond with an error but when entering the right one it takes like 13-15 seconds to log on. The smart card slot on Sun Ray 2 is flashing all that time, so it seems like it's reading the certificate takes that long?
Any ideas how to make it quicker?

I have done the same setup with SunRay 170.
Approx the same delay is experienced with my setup.
When I meet my Card Vendor next time around I will ask about
how many times the CERT is read.
The Sunray 2 is faster , alot faster than sunray 170 so the delay
must be the speed that card transactions can be performed.
//lars

Similar Messages

How to configure Firefox to use cert from smart card reader on Sun Ray 3 Plus

I have a Sun Ray 3 Plus configured so the user needs a smart card to login (CAC card) and bring up a Java Desktop on the Sun Ray Server (Solaris 10 SPARC).
Now I am trying to get Firefox to read the certificate from the smart card reader but not sure how to go about doing that.
From searching online, it seems like I have to load a module in Firefox:
Edit -> Preferences -> Certificates -> Security Devices
But what file do I load? I'm assuming it is a file that's part of the SUNWut package?

I try to test bumblebee with:
optirun glxgears
but I get this error:
Xlib: extension "GLX" missing on display ":8".
Error: couldn't get an RGB, Double-buffered visual

Sun Ray Windows Connector Terminal Services licenses issue

Hi!
I've installed the latest Sun Ray 4 09/07 as well as the Windows Connector (srwc) recently released on a machine. I've followed the instructions given in the installation guide. But when 'uttsc' is executed I received the following error message.
"No Terminal Services licenses are available"
I have no issue in connecting to other Windows server (say windows-02) only to this particular Windows server (windows-01). Surprisingly, I have no problem 'uttsc'-ing to windows-01 using pre-existing Sun Ray 4. Any idea why and how to resolve this?
Appreciate anyone who responds. Thanks.
Regards,
Jonathan

What Terminal Server license model are you using? And what does Windows Terminal Server License Manger show for number of licenses in use and availble?

Sun Ray, windows & and USB card readers

Hi all,
I read, or was told that the new version of the SR software (version 5) should enable more USB devices to work in combination with Sun Ray.
We currently serve our users with windows via SunRay - and it works very well. The only issue being that we need to get usb card readers - such as the acr38 to work with SunRay. Until now this has not worked. Does anyone know whether this is currently possible or whether this should be possible using SR 5?
thanks and regards,
Paul

Hi,
Do you provide terminal server desktop or a VDI based 'XP' desktop to your users ?
the next early access release (EA2) will support additional USB support; it seems only for VDI based 'xp' desktops; so that might solve your USB card reader request if you provide XP desktops.
The current PC/SC release does support some kind of second card reader attached to the sunray. Never looked indepth into this feature but i did see it read the card from the additional reader with the added debug tools.
Do you actually need this second card reader? Maybe you could use the PC/SC passthrough to windows to read the your card in the windows backend losing the second card reader.
if all else fails you could try a network USB hub. This device is attached to the network and your reader is attached to the device. Then you use a client on the windows environment to connect to the device; hence connect to your USB reader. The client on the windows environment that works with the device i've tested was only able to run just once on a terminal server.. so this is not a very scaleable solution if you run terminal server.
regards,
Patrick

USB Device Redirection with Sun Ray and Windows XP Desktops (vSphere)

Hello,
i use Sun VDI 3.0 (vda_3.0_amd64.zip) in our environment.
All connected Sun Ray's use Windows XP Desktops from VMWare vSphere.
Now i have some additional USB Devices that we will use with the Desktops.
But i'm Newbie at this topic.
On of these devices are a OmniKey - Cardman 3121 this is known to work (http://www.sun.com/bigadmin/hcl/sunray/usb/readers.jsp).
But which steps should I do that it's work?

OK, the last message here was February 2008; it is now July 2008. I just noticed that Microsoft is supplying a 64 bit version of their Windows Mobile Device Center 6.1 driver for Windows Vista (64 bit) at:
http://www.microsoft.com/downloads/details.aspx?familyid=4F68EB56-7825-43B2-AC89-2030ED98ED95&displa...
I just talked to a Palm salesman yesterday and he said all their phones still will not be synchronized with any Vista 64 Bit OS; their literature recommends 32 bit only.
I am contemplating upgrading my Treo 600 to a Treo 750 with Windows Mobile 6 Professional. I am trying to figure out how to synchronize the software before I purchase anything. I think now that Microsoft has solved the problem, not Palm and nobody in Palm or my cell phone provider (Rogers here in Canada) knows this yet.
Does anybody have any experience with this ongoing 64 bit Vista problem and the Treo 750.
Also if I get positive answers here, where do I go next to figure out how to bring over my Palm Treo 600 data. Since the operating system is different, I think I am stuck with exporting my contact addresses to a csv file. I do not know how I would recover my mail. I have not been using Outlook, just PalmOneMail v1.02a.
Any help would be appreciated.
Thanks,
Rick Urquhart
Post relates to: Treo 600 (Rogers)

Oracle Forms loading slower with Sun JRE in Oracle E-Business Suite 11i

Hi,
After Deploying Sun JRE (Native Plug-in) for Windows Clients in Oracle E-Business Suite 11i (Note 290807.1) we find that Oracle Forms are loading slower than using Jinitiator.
Also the PDF reports are opening in a minimized fashion. Meaning the PDF reports are opening correctly in new browser window (as expected) but is minimized.
Customer is not willing to go live with Sun JRE due to these issues.
Plz advice is there is any additional configuration I need to do.
Rgds,
Thiru

When the JRE was installed/configured on the workstations was the jar cache placed on a LAN drive instead of the local drive? We have experienced poor performance with both the JRE and Jinitiator when the Workstation Sysadmins configured the jar cache to be located on a LAN drive. Also is the size of the jar cache on the workstation sufficient to hold all of your required jar files. It could be downloading the jar files all the time.
Overall our performance with the JRE is comparible to the Jinitiator.
Sorry I have not experienced the problem that you are having with you pdf reports so I can't provide any comments on it.

Smart card logon with third party CA combined with ADFS to Office 365

Greetings,
I've been trying figure out how to implement ADFS to Office 365 in MS cloud in our environment, with little luck. I have a working 2012 domain and we are already using smart card logon on Windows 7/8 workstations. Certificates on smart cards are issued by
3rd party CA. This far every thing is fine and working, necessary root certificates are added to trusted Trusted Root Certification Authorities, UPN suffixes and users' UPNs are set according to UPN on the certificates and users successfully log on to
workstations with smart cards.
Now I face the requirement to enable SSOto Office 365 with accounts from our AD. I've been told by our MS partner and Dr. Google that in order to do that user account name (upn) in AD and in O365 need to match. Now the fact that account UPN in our AD is
not usable in O365 (because it is set to match 3rd party certificate UPN) and I have not found a way to enable smart card log on without changing UPN in AD.
Does anyone has experience of such a configuration? Is it possible to use AD federation to O365 at all in our case?
Best regards, and thanks in advance
Timo

On Fri, 25 Apr 2014 09:27:05 +0000, Timo Kallioniemi wrote:
Now I face the requirement to enable SSOto Office 365 with accounts from our AD. I've been told by our MS partner and Dr. Google that in order to do that user account name (upn) in AD and in O365 need to match. Now the fact that account UPN in our AD
is not usable in O365 (because it is set to match 3rd party certificate UPN) and I have not found a way to enable smart card log on without changing UPN in AD.
Does anyone has experience of such a configuration? Is it possible to use AD federation to O365 at all in our case?
This is not a general Windows server security issue. You should post your
question in an O365 support forum.
http://community.office365.com/en-us/f/default.aspx
Paul Adare - FIM CM MVP
Technology is dominated by two types of people: Those who understand
what they do not manage. Those who manage what they do not understand.
-- Putt's Law

CAC or smart card use with Oracle database and web server

I've been asked to smart card (CAC) enable our Oracle web server and database access. We currently use CAC to access many of our other applications.
Where can I find the following information
Oracle software required (and is it an additional cost)
How to integrate Oracle App server (web server) with CAC.
How would I need to change the database users accounts to be CAC enabled rather than database users accounts.
Thanks
steven jackson
[email protected]
614-692-9768

Virtualisation is not certified for Oracle RAC on Windows.
+Certified Software on Oracle VM [ID 464754.1]+ note states:
Oracle Real Application Clusters (RAC)
    Oracle 10.2.0.4 and up (10gR2) and 11.1.0.7 and up (11gR1) and 11gR2 RAC for Linux x86 and Linux x86_64 certified on Oracle VM
        Guest OS: Oracle Linux 5.1 (and above) RHEL 5.1 (and above) for Linux x86 / Linux x86_64
        Paravirtualized (PV) mode only (Guest OS and drivers)
        Only supported on Oracle VM 2.1.2 and above
        Live-migration of an Oracle RAC VM is supported with Oracle VM 2.2.1 and above.
        Previous versions are not supported. Please refer to this link for best practices.
        Over-committing CPUs is not recommended, but supported with the following restrictions:
            The total amount of VCPUs allocated to guest domains (running Oracle RAC guests), should not exceed
            two times (2x) the amount of real CPUs / cores in the Oracle VM server.
            The amount of VCPUs allocated to a single guest domain should not exceed the amount of real CPUs /
            cores in the Oracle VM server.
            Maintain Oracle VMs default VCPU allocation for dom-0: Oracle VM will allocate 1 VCPU for each real CPU or core to dom-0.
            CPU pinning is only recommended for hard partitioning. If no hard partitioning is required, CPU pinning should not be used.
        Static support only (dynamic support is being planned):
            Dynamic resizing of guest virtual machine is not supported (VCPU, memory and I/O)
            Virtual Machine Pause/Restore of an active Real Application Cluster virtual machine is not supported.

Set up a smart card for user logon to windows server 2012 R2

Good Evening,
I have Windows Server 2012 R2 Datacenter edition (dreamspark license)
Is it possible to successfully set up smart card logon to a server ? I already have the smart card reader, smart card and the certificate (which is also my digital signature) I know how to setup a DC role (as far as I know, the server has to be in a domain
to use smart card logon) I would like to logon using to my PC using a smart card and set the certificate I already have to use as a certificate for logon.
Kind Regards,
Tomasz

It would take a few things to do this, and could cause some security issues. In short, I assume the certificate you "already have" came from another environment or a commercial provider. You would need to configure your computer to trust that CA
to be an issuer of smart card authentication certificates. That effectively moves a good portion of your computer security control out of your environment. For many environments that is an unacceptable security risk.
If you dont have an Active Directory running, you will also need to make some accommodations to the standard guides. I dont believe there are any published guides on how to do this with a single server and third-party CAs.
Here are some references for generic smart card authentications. They are not 100% applicable to your need, so some interpretation is going to be needed.
http://msdn.microsoft.com/en-us/library/windows/desktop/aa380142(v=vs.85).aspx
http://msdn.microsoft.com/en-us/library/windows/desktop/aa380142(v=vs.85).aspx
Mark B. Cooper, President and Founder of PKI Solutions Inc., former Microsoft Senior Engineer and subject matter expert for Microsoft Active Directory Certificate Services (ADCS). Known as “The PKI Guy” at Microsoft for 10 years.

Smart Card Problem with AnyConnect over RDP

Hello,
For ASA 5545, v-8.6(1)2 and AnyConnect v-3.1.0165, I'm trying to start an AnyConnect client tunnel on a remote RDP (both ends Windows 7) machine and am having problems. The RDP is configured to proxy smart card devices which generally works fine. I'm using current SafeNet eToken with current client software. When I start AnyConnect from client machines (no RDP), the tunnel opens with no problem using the smart card. When I try to start the tunnel on the remote machine via RDP, I'm prompted for cert selection and smart card PIN, but get a popup from AnyConnect: 'VPN connection terminated, smart card removed from reader'. When I try to start the tunnel via RDP but use the ASA web server to start, the tunnel starts up fine with the smart card.
For the problem condition, the Windows event log on the remote RDP machine shows 3 entires (see below) wrt acvpnagent show smart card removal errors but the USB device is always inserted. Also, in investigating, I changed the client profile 'server list' config to SSL instead of IPSec. Same failure but the popup does not show.
VPN connection terminated, Smartcard removed from reader.
Description: VPNMGR_ERROR_SMARTCARD_REMOVED:A smartcard required for the connection has been removed
Thanks in advance for any assistance.
Mike

This can be resolved by going to services and disabling Smart card

Satellite A500 - Slower with Videos on Windows 7

Hi, I am desperately in need of advice, I am 78 years old and going up the wall.
My Satellite A500/03P was purchased with Vista preinstalled and worked well. My particular interest is the running and creation of video training clips for other Senior Citizens, as purchased video ran well, stutter free. I took up the offer of upgrading to Windows 7 and purchased the upgrade, things have gone rapidly downhill since. The Windows 7 install went crazy during install, requiring me to take the computer to a service shop. It was returned with Windows 7 installed, but was considerably slower with videos run from the hard drive stuttering, even worse from my ADSL2 Internet connection running at around 1.25M bits per sec.
After a while I took it back to the service man and $200 later was supplied with a dual boot hard drive, Windows 7 32 bit and Windows 7 64 bit. The system is realy virtually unuseable for video. I have downloaded and installed all of the 32 and 64 bit drivers available from Toshiba but have had to abandon the 64 bit completely as unuseable. I have tried to install another copy of Vista Ultimate, purchased for my old desktop, but could not get the Internet to work, either direct or via WIFI on the laptop.
I have tried to run the Toshiba on the 32bit Windows 7, but the Laptop is far too slow, even my email creeps in to the email readere. Any advice would be most appreciated as my pension wont support the local service peoples charges. Should I purchase the original Toshiba disks and return to "ex Factory Vistor State" or what.
Regards
LeslieB

I have often seen/heard of people having issues with upgrading to Win 7 from Vista. If some one were to ask me what to do when wanting to ugprade, I would probably advise a clean install.
If you do not want to try that route yet, hm...
*Video/Audio*
In advanced power settings, do you have any listing for multimedia?
For the HDMI issues, I am not sure what the problem is, but if there is a listing for multimedia settings in advanced power settings, for which you can set it to maxium performance, hopefully that may solve the case. If it is not there, I will try and tell you what to do.
IF the sound does not stutter in HDMI, then the audio must be fine...
Try this link: [http://www.tomshardware.com/forum/274828-33-hdmi-output-device-windows-radeon-4650]
I am not sure how to help here yet!
*Connecting to Internet WiFi/direct*
Does it still work in Win 7? Might be a OS driver update kind of thing.

Unable to pair BB Smart Card Reader with Pc/Laptop

Hi, I have 2 new BB smart card readers (SCR) and Im trying to pair with the PC and I can not. The SCR software can not detect the SCR. I put the ID of the device on the software and is trying to looking for it but can not. It says "Unable to connect to the specified Blackberry smart card reader". I have another SCR and I don't have problems to pair with the computer only with the new ones. The SCR have the last OS. Do you know what could be the problem? I think is a bug of the new SCR.

mzamora wrote:
Andy, may be nothing so where can I post it? Is there a general discussion?
Hello,
if I were you, I'd post in the "General Blackberry Smartphone Functions and Features" forum.
The search box on top-right of this page is your true friend, and the public Knowledge Base too:

Smart Card application with EJB?

Hallo
I have the following problem:
I have to write an application which should be accessible from the internet. The whole application has to be on the server. Every user who wants to get access to the application has to insert a smartcard into the Reader who is installed on his local system. The application has to read some information (username or password for example) from the card and to prove if the user is allowed to start the Application.
Does anybody has an idea how to realize this? Is it possible to realize this with EJB or do i have to use an other technology?
Thanks for your answers

Well i did not use the java smart card technology. I used the Java native interface to implement the classes who have to read from the card. I got an api dll from the producer of the smart card. So i used the Java native interface to realize the logic of the smartcard application. This part of my programm is written in c++. The problem is that the whole programm is on a server but for getting access to the smartcard reader the dll s (the api dll from the producer and my dll for the jni) have to been installed on every client......
You said that i have to write a swing client who picks the information from the smartcard and sends it afterwards to the enterprise system. Is there no other possibility to solve this problem without writing a swing client ?

PIV II Contactless Smart Card Support with Blackberry 10 Devices?

I've seen documents describing NFC smart card support and ISO 14443 compliance in Blackberry 10 software and devices, but this doesn't really make it clear... Does the NFC support in BlackBerry 10 devices allow it to use certificates on a PIV II contactless smart card (which follows ISO 14443) for signing and encryption of e-mail? (without needing the separate Bluetooth-connected BlackBerry smart card reader)

OK, undestood, I am neither of those. Just a user.
POP email does not push instantly. I will tell you what another user here commented in another thread... any business now a days that is still on POP email is somewhat like using candles to light your offices. You need to be on IMAP.
Perhaps you can check and see what it would take to convert. In most cases, it should be simple.
And if you do, ASK if that IMAP has PUSH enabled.
Or in naval terms... like sticking with a sail as the lastest technology when steam propulsion is available.
1. If any post helps you please click the below the post(s) that helped you.
2. Please resolve your thread by marking the post "Solution?" which solved it for you!
3. Install free BlackBerry Protect today for backups of contacts and data.
4. Guide to Unlocking your BlackBerry & Unlock Codes
Join our BBM Channels (Beta)
BlackBerry Support Forums Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

How to Smart Card integrated with database ..im beginner

Dear,
im beginner for Technologies Smart Card.. I have ACOS2 and reader ACR30D ..I hope u can helping me..please my question?
1. How to java or Visul Basic integrated and presenting data on file in card (like name, address, phone number, ..etc)?
2. Please give me sample project in Visual Basic..?
its just for finnal test me.
Thanks for all
Best Reagard,
[email protected]

hello,
Check the section titled Reference Implementation on this page out.
http://www.opencard.org/index-downloads.shtml
Also if you really need codes in VB, this guys have stuff like that
http://www.motechno.com/x509-sdk.0.html
Tha development kit MAY be all you need
All the best,

Smart Cards slow with Sun Ray Windows Connector

Similar Messages

Maybe you are looking for