Question Regarding Smart Card Deployment

Posted by DLN on September 12, 2007, 2:16 pm

Please log in for more thread options

I'm researching smartcard deployments, and how they integrate into a Windows
Domain and Microsoft Certificate Services (Windows 2003 Server Enterprise to
be specific), and I have a question that I'm hoping someone here can help me
answer. If I have a specific vendor smartcard solution (something
manufactured by Gemalto, for example), can I get any generic smartcard
read/writer and use it with the web enrollment interface to write to the
smartcard, or does the writer have to be compatible with the vendor
solution?

Thanks,

DLN

Posted by Brian Komar on September 12, 2007, 4:44 pm

Please log in for more thread options

Think of smart card readers as floppy drives. You do not need a Verbatiun
floppy drive to read a Verbatim floppy disk
As long as there are drivers for your vesrion o fthe OS, you should be able
to go with any vendor's smart card readers.
Of course, check out how they perform with your chosen cards, as there are
known cases where the smart card reader mixed with the selected CSP and
smart card can have unfavorable login times.
Brian

show/hide quoted text

Posted by Paul Adare on September 12, 2007, 4:53 pm

Please log in for more thread options

On Wed, 12 Sep 2007 11:16:33 -0700, DLN wrote:

show/hide quoted text

The reader does not need to match the card vendor.

--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
You had mail, but the super-user read it, and deleted it!

Posted by S. Pidgorny on September 13, 2007, 5:32 am

Please log in for more thread options

Interestingly, over years I have had assorted issues with card/reader
compatibility - form reader unable to write a card to BSoD when I pulled a
card from the reader. Not so much lately, but one must be warned :)

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

news:1dg6ztrjqtykr$.6jvca6ign2b3
show/hide quoted text