Entrust Managed Services PKI: Windows Smart Card Logon ...

More documents

Recommendations

Info

Copyright © 2009 Entrust. All rights reserved. Entrust is a trademark or a registered trademark of Entrust, Inc. in certain countries. All Entrust product names and logos are trademarks or registered trademarks of Entrust, Inc. in certain countries. All other company and product names and logos are trademarks or registered trademarks of their respective owners in certain countries. This information is subject to change as Entrust reserves the right to, without notice, make changes to its products as progress in engineering or manufacturing methods or circumstances may warrant. Obtaining technical support For support assistance by telephone call one of the numbers below: • 1-877-754-7878 in North America • 1-613-270-3700 outside North America You can also email Customer Support at: support@entrust.com Export and/or import of cryptographic products may be restricted by various regulations in various countries. Export and/or import permits may be required. 2 Entrust Managed Services PKI Windows Smart Card Logon Configuration Guide
TOC Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5 Purpose and scope . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Configuring for Windows Smart Card Logon. . . . . . . . . . . . . . . . . . . . . . . . . .9 Obtaining the Entrust configuration tools for Windows Smart Card Logon 10 Obtaining the fully qualified host name and GUID . . . . . . . . . . . . . . . . . . 12 Creating a Domain Controller certificate . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Enrolling the certificate for the Domain Controller . . . . . . . . . . . . . . . . . . . 23 Distributing the CA certificate(s) to the trusted root store of all Domain Controllers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Downloading the certification authority certificate(s) . . . . . . . . . . . . 26 Running the Entrust installCert.bat . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Configuring users for Windows Smart Card Logon . . . . . . . . . . . . . . . . . . 30 Smart Card Logon in Vista . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Page 1: Entrust Managed Services PKI Entrus
Page 5 and 6: 1 Overview This guide documents how
Page 7 and 8: 3 The smart card client software se
Page 9 and 10: 2 Configuring for Windows Smart Car
Page 11 and 12: 3 Click Save to save the files to a
Page 13 and 14: Creating a Domain Controller certif
Page 15 and 16: You successfully logged in to Admin
Page 17 and 18: 6 From the User Information section
Page 19 and 20: Note: If you navigated away from th
Page 21 and 22: 4 In the Subject Alternative Naming
Page 23 and 24: Enrolling the certificate for the D
Page 25 and 26: 7 Click Yes to request a certificat
Page 27 and 28: 2 From the left pane under CA Certi
Page 29 and 30: To run the installCert.bat 1 Naviga
Page 31 and 32: 3 From the User Type drop-down list
Page 33 and 34: directory when you signed up for En
Page 35 and 36: 15 Scroll down to the bottom of the
Page 37 and 38: 17 Click Submit. A success message
Page 39 and 40: 4 Complete Step 13 on page 33 to St
Page 41 and 42: 4 Based on your search results, sel
Page 43 and 44: Smart Card Logon in Vista Windows V

Entrust Managed Services PKI: Windows Smart Card Logon ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?