Yubico Forum

Re: Unblock PIV PIN with PUK in windows environment remotely

2016-05-12T22:55:41+01:00

unfortunately what you are running into is the RDP session is redirecting the USB output to your remote client instead of the localhost. If you need to reset a YubiKey remotely, using a secondary remote access client such as Logmein or GoToAssist maybe the better solution.

Best Regards,
Matthew
Yubico Support

Statistics: Posted by mattlegitt — Thu May 12, 2016 10:55 pm

Re: Unblock PIV PIN with PUK in windows environment remotely

2016-05-12T14:27:13+01:00

ChrisHalos wrote:

I assume you're referring to Windows-to-Windows RDP. The first thing I would check is if the smart card service is running on the remote system, or if smart card passthrough is enabled.

EDIT: After reading your question a couple of times, I think you're saying PIV Tool is running on the source computer and the YubiKey is plugged into the destination computer. If that's the case, you can't do this. If the YubiKey is plugged into the destination computer, you also need to run the PIV Tool from the destination computer. If the YubiKey is plugged into the source computer, you CAN run the PIV Tool from the destination computer.

No I'm running the PIV Tool on the remote machine as if I was actually on that machine. The smartcard service is running and I thought smartcard passthrough applies if I have a smart card on my local machine that I am trying to passthrough to the remote machine.

If a remote user accidentally locks their smartcard I would like to be able to remotely unlock their card. Is there not a way to do this?

Statistics: Posted by jellykid — Thu May 12, 2016 2:27 pm

Re: Unblock PIV PIN with PUK in windows environment remotely

2016-05-11T20:13:00+01:00

Statistics: Posted by ChrisHalos — Wed May 11, 2016 8:13 pm

Unblock PIV PIN with PUK in windows environment remotely

2016-05-11T18:59:11+01:00

If I RDP to a system that has a yubikey inserted, YubiKey PIV Manager does not see the card, I get "No YubiKey found. Please insert a PIV enabled YubiKey..." If I physically log onto the system the PIV manager does see the key and will allow me to reset the pin with the puk. I've tried remote PS sessions as well and get the error
.\yubico-piv-tool.exe : Failed to connect to reader.
+ CategoryInfo : NotSpecified: (Failed to connect to reader.:String) [], RemoteException
+ FullyQualifiedErrorId : NativeCommandError

What is the best practice for resetting a card's pin remotely with puk once the pin has been blocked?

Statistics: Posted by jellykid — Wed May 11, 2016 6:59 pm