unable to get certificate on smart card using CLM.

[smart card and clm]

I successfully got software certificate on the system using "Sample Profile
template" and following the steps mentioned at the link
"http://technet2.microsoft.com/ILM/en/library/a4d5346d-418c-497c-bbab-ff49e94e982b1033.mspx?mfr=true".

But i fail to get it on smart card.
smart card is detected when i click on"details of smart card" on web portal.

can u please specify what all changes i have to make in steps when i want to
get cert on smart card instead of system store.

please tell one more thing.actually error is prompted on the screen after
"data collection screen" (while requesting for cert)on which sample data
titem is asked for.

Do i need to make some changes there?

Priyanka

 

[David H. Lipman]

From: "smart card and clm" <smart card and (e-mail address removed)>

| I successfully got software certificate on the system using "Sample Profile
| template" and following the steps mentioned at the link
| "http://technet2.microsoft.com/ILM/en/library/a4d5346d-418c-497c-bbab-ff49e94e982b1033.
| mspx?mfr=true".

| But i fail to get it on smart card.
| smart card is detected when i click on"details of smart card" on web portal.

| can u please specify what all changes i have to make in steps when i want to
| get cert on smart card instead of system store.

| please tell one more thing.actually error is prompted on the screen after
| "data collection screen" (while requesting for cert)on which sample data
| titem is asked for.

| Do i need to make some changes there?

| Priyanka

What Smart Card middleware are you using ?

 

[smart card and clm]

Thanks Dave,

i m using "microsoft smart card base crypto provider" as CSP and safenet RSA
CSP as minidriver.

Anyways i followed all the steps mentioned at site "
http://technet2.microsoft.com/ILM/en/library/a4d5346d-418c-497c-bbab-ff49e94e982b1033.mspx?mfr=true
" under the section "CLM deployment " and "CLM Operations".

As mentioned in the steps for "configuring smart card profile templates", i
need to configure MMC. and as i complete all the steps of configuring
MMC(after entering smart card pin), i get certificate on smart card. but then
where comes the role of CLM website? how to get certificate from that web
page on the token ?


Moreover i get the below mentioned errors while getting cert from that web
page.

1. when the smart card is inserted , and the link for finding the smart card
is clicked, it detects the smart card but on clicking "o.k" it gives error
that it could not find the serial number ?

2. When i search for a user and click on the ink"issue certificate for the
user" , in the next screen it asks to choose profile template .and the very
next screen shows that "current user does not have access to any of the
profile templates" whereas i have given the permissions to that particular
user in all the profile templates(CLM profile templates and CLM smart card
profile templates). then why is this message shown?

 

[David H. Lipman]

From: "smart card and clm" <[email protected]>

| Thanks Dave,

| i m using "microsoft smart card base crypto provider" as CSP and safenet RSA
| CSP as minidriver.

| Anyways i followed all the steps mentioned at site "
| http://technet2.microsoft.com/ILM/en/library/a4d5346d-418c-497c-bbab-ff49e94e982b1033.
| mspx?mfr=true
| " under the section "CLM deployment " and "CLM Operations".

| As mentioned in the steps for "configuring smart card profile templates", i
| need to configure MMC. and as i complete all the steps of configuring
| MMC(after entering smart card pin), i get certificate on smart card. but then
| where comes the role of CLM website? how to get certificate from that web
| page on the token ?


| Moreover i get the below mentioned errors while getting cert from that web
| page.

| 1. when the smart card is inserted , and the link for finding the smart card
| is clicked, it detects the smart card but on clicking "o.k" it gives error
| that it could not find the serial number ?

| 2. When i search for a user and click on the ink"issue certificate for the
| user" , in the next screen it asks to choose profile template .and the very
| next screen shows that "current user does not have access to any of the
| profile templates" whereas i have given the permissions to that particular
| user in all the profile templates(CLM profile templates and CLM smart card
| profile templates). then why is this message shown?


You need middlware such as, but not limited to...

CardLogix Winplex
ActivClient
NetSign

 

[Priyanka]

From: "smart card and clm" (e-mail address removed)

| Thanks Dave,

| i m using "microsoft smart card base crypto provider" as CSP an
safenet RSA
| CSP as minidriver.

| Anyways i followed all the steps mentioned at site "
| http://tinyurl.com/3pdv7j.
| mspx?mfr=true
| " under the section "CLM deployment " and "CLM Operations".

| As mentioned in the steps for "configuring smart card profil
templates", i
| need to configure MMC. and as i complete all the steps o
configuring
| MMC(after entering smart card pin), i get certificate on smart card
but then
| where comes the role of CLM website? how to get certificate from tha
web
| page on the token ?


| Moreover i get the below mentioned errors while getting cert fro
that web
| page.

| 1. when the smart card is inserted , and the link for finding th
smart card
| is clicked, it detects the smart card but on clicking "o.k" it give
error
| that it could not find the serial number ?

| 2. When i search for a user and click on the ink"issue certificat
for the
| user" , in the next screen it asks to choose profile template .an
the very
| next screen shows that "current user does not have access to any o
the
| profile templates" whereas i have given the permissions to tha
particular
| user in all the profile templates(CLM profile templates and CLM smar
card
| profile templates). then why is this message shown?


You need middlware such as, but not limited to...

CardLogix Winplex
ActivClient
NetSign

I m almost done with setup of CLM.The only problenm i am facing is tha
i m unable to create XML file. I went through the sample XML file, bu
could not make changes for the middleware i m using i.e Safenet RSA CS
wid Microsoft Base Smart Card crypto provider as minidriver. Can anybod
help me in configuring that file. It gives me error " smart car
information not available".

Thanks,
Priyanka