Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 2:13 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 3 posts ] 
Author Message
PostPosted: Thu Jun 15, 2017 9:41 am 
Offline

Joined: Thu Jun 15, 2017 9:26 am
Posts: 3
Hello,

I've configured my Yubikey 4 for Authenticating SSH with PIV and PKCS#11.
Everything works fine with cmder in bash mode and a modified version of pageant.

My problem is that my private key was generated with --pin-policy="once" option and despite that,
a windows 10 security prompt (see attached jpg) want my pin every time i'm trying to connect with ssh on my servers.
So i'm thinking that windows 10 has a pin-policy for smartcards that overrides the policy of my private key.

What do you think ? , does anyone have a solution please ?

All my apologies for the quality of my english, i'm just a french dev !!!


Attachments:
prompt.jpg
prompt.jpg [ 73.03 KiB | Viewed 1224 times ]


Last edited by Walterdude on Tue Jun 20, 2017 3:16 pm, edited 1 time in total.
Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Thu Jun 15, 2017 3:49 pm 
Offline

Joined: Thu Jun 15, 2017 9:26 am
Posts: 3
It seems that : Smart Card's Registry Key are missing in RedStone2 version.

Sow how to make it work again and respect piv pin policy ?

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CertProp

https://docs.microsoft.com/en-us/window ... istry-keys


Top
 Profile  
Reply with quote  
PostPosted: Tue Jun 20, 2017 3:15 pm 
Offline

Joined: Thu Jun 15, 2017 9:26 am
Posts: 3
Problem solved by this fork oh Putty CAC, named Putty CAC 0.69

https://github.com/NoMoreFood/putty-cac/releases


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: Google [Bot] and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group