| Yubico Forum https://forum.yubico.com/ |
|
| Unblock PIV PIN with PUK in windows environment remotely https://forum.yubico.com/viewtopic.php?f=35&t=2305 |
Page 1 of 1 |
| Author: | jellykid [ Wed May 11, 2016 6:59 pm ] |
| Post subject: | Unblock PIV PIN with PUK in windows environment remotely |
If I RDP to a system that has a yubikey inserted, YubiKey PIV Manager does not see the card, I get "No YubiKey found. Please insert a PIV enabled YubiKey..." If I physically log onto the system the PIV manager does see the key and will allow me to reset the pin with the puk. I've tried remote PS sessions as well and get the error .\yubico-piv-tool.exe : Failed to connect to reader. + CategoryInfo : NotSpecified: (Failed to connect to reader.:String) [], RemoteException + FullyQualifiedErrorId : NativeCommandError What is the best practice for resetting a card's pin remotely with puk once the pin has been blocked? |
|
| Author: | ChrisHalos [ Wed May 11, 2016 8:13 pm ] |
| Post subject: | Re: Unblock PIV PIN with PUK in windows environment remotely |
I assume you're referring to Windows-to-Windows RDP. The first thing I would check is if the smart card service is running on the remote system, or if smart card passthrough is enabled. EDIT: After reading your question a couple of times, I think you're saying PIV Tool is running on the source computer and the YubiKey is plugged into the destination computer. If that's the case, you can't do this. If the YubiKey is plugged into the destination computer, you also need to run the PIV Tool from the destination computer. If the YubiKey is plugged into the source computer, you CAN run the PIV Tool from the destination computer. |
|
| Author: | jellykid [ Thu May 12, 2016 2:27 pm ] |
| Post subject: | Re: Unblock PIV PIN with PUK in windows environment remotely |
ChrisHalos wrote: I assume you're referring to Windows-to-Windows RDP. The first thing I would check is if the smart card service is running on the remote system, or if smart card passthrough is enabled. EDIT: After reading your question a couple of times, I think you're saying PIV Tool is running on the source computer and the YubiKey is plugged into the destination computer. If that's the case, you can't do this. If the YubiKey is plugged into the destination computer, you also need to run the PIV Tool from the destination computer. If the YubiKey is plugged into the source computer, you CAN run the PIV Tool from the destination computer. No I'm running the PIV Tool on the remote machine as if I was actually on that machine. The smartcard service is running and I thought smartcard passthrough applies if I have a smart card on my local machine that I am trying to passthrough to the remote machine. If a remote user accidentally locks their smartcard I would like to be able to remotely unlock their card. Is there not a way to do this? |
|
| Author: | mattlegitt [ Thu May 12, 2016 10:55 pm ] |
| Post subject: | Re: Unblock PIV PIN with PUK in windows environment remotely |
unfortunately what you are running into is the RDP session is redirecting the USB output to your remote client instead of the localhost. If you need to reset a YubiKey remotely, using a secondary remote access client such as Logmein or GoToAssist maybe the better solution. Best Regards, Matthew Yubico Support |
|
| Page 1 of 1 | All times are UTC + 1 hour |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|