Home Active Directory (III) 5. Planning Security for Active Directory 5.6 Setting Up a Smart Card for User Logon

5.6 Setting Up a Smart Card for User Logon

Marţi, 18 August 2009 16:33 Eugen Morar
Email
In this video i will show you how to setup a Smart Card for User Logon.


 
Follow the steps in this exercise to enroll a smart card for user logon. Note that you must complete Exercise 6.5 before continuing. In addition, you must have a smart card reader and at least one blank smart card available.
  1. Open Internet Explorer by selecting Start > Internet Explorer.
  2. In the Address field, enter the address of the CA that issues smart card certificates and press Enter.
  3. In the IE window, click Request A Certificate, then click Advanced Certificate Request.
  4. Click Request A Certificate For A Smart Card On Behalf Of Another User Using The Smart Card Certificate Enrollment Station. If prompted, click Yes to accept the smart card signing certificate.
  5. Click Smart Card Logon on the Smart Card Certificate Enrollment Station web page.
  6. Under Certification Authority, select the CA you want to issue the smart card certificate.
  7. Under Cryptographic Service Provider, select the cryptographic service provider of the smart card’s manufacturer.
  8. Under Administrator Signing Certificate, click the Enrollment Agent certificate from the previous exercise.
  9. Under User To Enroll, click Select User. Select the user to enroll and click Enroll.
  10. When prompted, insert the smart card into the smart card reader and click OK. When prompted, enter a new PIN for the smart card.