Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 6:53 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 4 posts ] 
Author Message
PostPosted: Wed May 11, 2016 6:59 pm 
Offline

Joined: Wed May 11, 2016 5:28 pm
Posts: 3
If I RDP to a system that has a yubikey inserted, YubiKey PIV Manager does not see the card, I get "No YubiKey found. Please insert a PIV enabled YubiKey..." If I physically log onto the system the PIV manager does see the key and will allow me to reset the pin with the puk. I've tried remote PS sessions as well and get the error
.\yubico-piv-tool.exe : Failed to connect to reader.
+ CategoryInfo : NotSpecified: (Failed to connect to reader.:String) [], RemoteException
+ FullyQualifiedErrorId : NativeCommandError


What is the best practice for resetting a card's pin remotely with puk once the pin has been blocked?


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Wed May 11, 2016 8:13 pm 
Offline
Yubico Team
Yubico Team

Joined: Thu Oct 16, 2014 3:44 pm
Posts: 349
I assume you're referring to Windows-to-Windows RDP. The first thing I would check is if the smart card service is running on the remote system, or if smart card passthrough is enabled.

EDIT: After reading your question a couple of times, I think you're saying PIV Tool is running on the source computer and the YubiKey is plugged into the destination computer. If that's the case, you can't do this. If the YubiKey is plugged into the destination computer, you also need to run the PIV Tool from the destination computer. If the YubiKey is plugged into the source computer, you CAN run the PIV Tool from the destination computer.


Top
 Profile  
Reply with quote  
PostPosted: Thu May 12, 2016 2:27 pm 
Offline

Joined: Wed May 11, 2016 5:28 pm
Posts: 3
ChrisHalos wrote:
I assume you're referring to Windows-to-Windows RDP. The first thing I would check is if the smart card service is running on the remote system, or if smart card passthrough is enabled.

EDIT: After reading your question a couple of times, I think you're saying PIV Tool is running on the source computer and the YubiKey is plugged into the destination computer. If that's the case, you can't do this. If the YubiKey is plugged into the destination computer, you also need to run the PIV Tool from the destination computer. If the YubiKey is plugged into the source computer, you CAN run the PIV Tool from the destination computer.


No I'm running the PIV Tool on the remote machine as if I was actually on that machine. The smartcard service is running and I thought smartcard passthrough applies if I have a smart card on my local machine that I am trying to passthrough to the remote machine.

If a remote user accidentally locks their smartcard I would like to be able to remotely unlock their card. Is there not a way to do this?


Top
 Profile  
Reply with quote  
PostPosted: Thu May 12, 2016 10:55 pm 
Offline
Yubico Moderator
Yubico Moderator

Joined: Tue Jan 05, 2016 5:03 pm
Posts: 27
unfortunately what you are running into is the RDP session is redirecting the USB output to your remote client instead of the localhost. If you need to reset a YubiKey remotely, using a secondary remote access client such as Logmein or GoToAssist maybe the better solution.

Best Regards,
Matthew
Yubico Support


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: Heise IT-Markt [Crawler] and 6 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group