Simplifying Smart Card Logon (PIN Prompt, disable CAD)
Hi, I've seen forms of this question asked before, but nothing pertaining to the specifics I'm looking for answers to. The end goal of what I'm looking to do is get the same user experience from smart card logon that I had in XP in Windows 7 including: no required Control+Alt+Delete (CAD) automatic prompting for PIN switching to PIN prompt when card is inserted (not having to dig through Other Credentials). My research as far as disabling CAD has lead me to find that I need to disable the Secure PIN Channel "feature" via Common Criteria Group Policy or edit a Cryptographic Service Provider (CSP) parameter via a minidriver. Source I'm new to the Windows admin side of life, but the Common Criteria GPO stuff seems to only return results related to Windows 2000 Server and there are no Win7 GPO's that I have found to do what I'm looking to do. As far as getting the PIN prompt to come up after CAD, it doesn't seem like there's any consistent way to do it beyond tweaking the registry to change the key for "LastLoggedOnProvider" to smart card via a logon script. Source If anyone had an idea to share or some background knowledge beyond the documentation I'd found I'd really appreciate it. Thanks
April 22nd, 2011 1:06pm

I recently developed a cryptographically secure password generator tool that I posted on my developer site. It includes the use of a cryptographic service provider, current I am using RSA but I may add ECC as an alternative. Keep in mind this generator is several hundred lines of C++ code. Smart cards have not really seen much use with the PC. There are some applications but they are outside the scope of this post. My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT Remote Assistance is available for a fee. I am best with C++ and I am learning C# using Visual Studio 2010 Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews
Free Windows Admin Tool Kit Click here and download it now
April 23rd, 2011 11:46am

Thanks for the response, but this has absolutely nothing to do with my question.
April 25th, 2011 9:49am

a server policy can block CAD prompting for a PIN is not standard, generally user/pass is presented as for the smart card, that is entirely dependent on the card and the associated software stack My MVP is for the Windows Desktop Experience, i.e. Windows XP, Vista and Windows 7 IT Remote Assistance is available for a fee. I am best with C++ and I am learning C# using Visual Studio 2010 Developer | Windows IT | Chess | Economics | Hardcore Games | Vegan Advocate | PC Reviews
Free Windows Admin Tool Kit Click here and download it now
April 25th, 2011 9:52am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics