IE client authentication smartcard ,,,

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Chad Langston (info_at_geminisecurity.com)
Date: 02/02/04


Date: Mon, 2 Feb 2004 15:58:37 -0500

Hello Everyone,

I am hoping someone will have some insight into this problem. I have an IIS
website that requires client authentication. My clients are all using
smartcards, specifically the Rainbow iKey, with Internet Explorer. When
they visit the site they are asked to select their certificate for
authentication. If their
smartcard is inserted they are prompted for the smartcard password. Upon
entering their password the SSL tunnel is created. If their certificate is
revoked, IIS will return an appropriate error message and the client
authentication will fail. This is great.

If, however, their smartcard is not inserted and they select their
certificate for client authentication, IIS does not generate an error
message. In fact, it appears as though both IE and IIS simply drop the
connection. This is rather unfortunate. I need to be able to redirect this
error and inform my clients that they should insert their smartcard before
attempting to enter the site.

Could anyone help me to better understand this problem? And, does anyone
know if Microsoft has plans to resolve it?

Many Regards,
Chad Langston
Gemini Security Solutions



Relevant Pages

  • Re: IIS client authentication smartcard ,,,
    ... I take it that this test was done using the same client ... >>Subject: IIS client authentication smartcard,,, ... >>website that requires client authentication. ... >>smartcard is inserted they are prompted for the smartcard password. ...
    (microsoft.public.security)
  • IIS client authentication smartcard ,,,
    ... I have an IIS ... website that requires client authentication. ... smartcard is inserted they are prompted for the smartcard password. ...
    (microsoft.public.platformsdk.security)
  • IIS client authentication smartcard ,,,
    ... I have an IIS ... website that requires client authentication. ... smartcard is inserted they are prompted for the smartcard password. ...
    (microsoft.public.security)
  • Re: Confused about SSL/Client Authentication
    ... that we want the user name off of the client cert to appear in the IIS ... > My certificate might contain an OU field that says I ... >> client authentication, in general. ...
    (comp.security.misc)
  • RE: IIS client authentication smartcard ,,,
    ... I take it that this test was done using the same client ... >website that requires client authentication. ... >smartcard is inserted they are prompted for the smartcard password. ... IIS will return an appropriate error message and the client ...
    (microsoft.public.security)