[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ms-cryptoapi
Subject:    (U) IPSec in Win2K
From:       Loyless Jerrod A Cont ESC/DIWS <Jerrod.Loyless () LACKLAND ! AF ! MIL>
Date:       2002-11-18 18:31:12
[Download RAW message or body]

Classification: UNCLASSIFIED

Has anyone gotten IPsec to do a CRL check in Win2K?  I did the MS registry
hack but it does not seem to be checking.  Any ideas?

Jerrod

-----Original Message-----
From: Thorsten Weins [mailto:t.weins@T-ONLINE.DE]
Sent: Monday, November 18, 2002 3:32 AM
To: CryptoAPI@DISCUSS.MICROSOFT.COM
Subject: Smart Card Logon, Third Party CA


Hello,

I have problems using my smart card CSP for smart card logon on both
WinXP and Win2K. Every time I when I try to logon I receive the error
message: "The system could not log you on. Your credentials could not
be verified".

The Kerberos Protokoll shows the following error in the syslog:
KDC_ERR_CLIENT_NOT_TRUSTED error data: 30 05 a1 03 02 01 02

I have followed the guidelines for enabling smart card logon with
Third-Party CAs, which means the CA certificate is in the NTAuth store
in Active Directory, a domain controller certificate is installed, the
smart card certificate is issued by the Third-Party CA and fulfills the
specific requirements, a revocation list is installed, etc.

Any ideas what might be wrong with my implementation?

Best regards,

Thorsten Weins

----------------------------------------------------------------
Users Guide http://discuss.microsoft.com/archives/mailfaq.asp
contains important info. Save time, search the archives at
http://discuss.microsoft.com/archives/index.html .
To unsubscribe, mailto:CryptoAPI-signoff-request@DISCUSS.MICROSOFT.COM

Classification: UNCLASSIFIED

----------------------------------------------------------------
Users Guide http://discuss.microsoft.com/archives/mailfaq.asp
contains important info. Save time, search the archives at
http://discuss.microsoft.com/archives/index.html .
To unsubscribe, mailto:CryptoAPI-signoff-request@DISCUSS.MICROSOFT.COM
[prev in list] [next in list] [prev in thread] [next in thread]