RE: Password prompts when signing with smartcard

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi Bill,

Thanks for your feedback.

Yes, I originally have the same thought as you. However, for security
reasons, the Smartcard CSP doesn't provide the feature of exporting the RSA
private key pair from the smartcard . The private key never leaves the
smartcard. So, you cannot export the key pair outside of Smart Card.

We have to use Win32 crypto Win32 API to access the Smart Card key pairs,
which is what sn.exe does internally. The only option to this issue is
rewriting the sn.exe to support re-signing the multiple assemblies at a
single command line.

Based on your concern regarding sn.exe, I recommend you provide the
feedback in the feedback center below:
http://connect.microsoft.com/Main/content/content.aspx?ContentID=2220

Our product team will receive your feedback request and follow up with you.

Thanks.

Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • Re: Multiple Certs on Smartcard and Windows Smartcard Logon
    ... > Users will have smartcards for storing multiple key pairs / certificates. ... > smartcard logon key pair and cert. ... > look in the certificates' key usage for a smartcard logon usage ). ... You can have multiple certificates on a smart card. ...
    (microsoft.public.windows.server.security)
  • Multiple Certs on Smartcard and Windows Smartcard Logon
    ... smartcard logon key pair and cert. ... Any advice would be extremely welcome. ...
    (microsoft.public.windows.server.security)
  • RE: Difference between AT_KEYEXCHANGE and AT_SIGNATURE
    ... normally you need CERTIFICATE for them. ... So if you want to use only 1 key pair for both, ... Normally you shold NEVER reveal youd signing private key. ... simply generate a new signing key pair and use that from that point of time. ...
    (microsoft.public.platformsdk.security)
  • RE: AT_SIGNATURE and AT_KEYEXCHANGE
    ... The certificate EXTENSIONwill tell what the key is valid for. ... private key is valid ONLY for signature than it will be set as AT_SIGNATURE. ... key pair and one cert. ...
    (microsoft.public.platformsdk.security)
  • Howto convert a login-password combo into a key?
    ... the same RSA public-private key pair given the same "seed" data into ... I want to be able to regenerate a private key simply by ... run it thru a hash function or a key derivation function. ... Thanks for any help...and your patience with this potential faq. ...
    (sci.crypt)