Page 2 - GoldTM, see the ActivCard Gold user guide.; Introduction; or
2 This white paper discusses the implementation of ActivCard® smart cards on HP Consolidated Client Infrastructure (CCI). This white paper is not intended as a comprehensive overview of ActivCard smart card technology.NOTE: The images and instructions in this white paper use Microsoft Windows XPe; h...
Page 3 - Configuration compatibility; confirmed that the configurations work in a CCI environment.
3 • Blade Enclosure.• HP e-class blade enclosure. • Blade PCs• HP bc1000 blade PC running Microsoft Windows XP SP2 w/HPSAM blade service installed.• HP bc1500 blade PC running Microsoft Windows XP SP2 w/HPSAM blade service installed. • Clients• HP Compaq t5000 series thin client running Microsoft Wi...
Page 4 - Software configuration; Step 1: Configuring a Certificate Authentication (CA) service; Certificate Templates
4 Software configuration Configure the following items to set up a smart card solution on CCI: 1. Certificate Authentication (CA) service 2. Group policy settings 3. Middleware running on a HP blade PC 4. Smart card client driver Step 1: Configuring a Certificate Authentication (CA) service Configur...
Page 5 - Type a name for the new template in the; Template display name; box. This example uses
5 4. Type a name for the new template in the Template display name box. This example uses CCI Smartcard Logon .
Page 7 - In the; Permissions for Authenticated Users; and; Enroll
7 10. In the Permissions for Authenticated Users box, in the Allow column, select Read and Enroll . You have completed creation of the template. 11. Copy the CCI Smartcard Logon certificate template into the Certificate Templates folder under the cer- tificate server.a) Expand the Certification Auth...
Page 8 - Select the template, and then click; OK; to import the template.
8 d) Select New > Certificate Template to Issue . 12. Select the template, and then click OK to import the template.
Page 9 - Step 2: Group policy setting; through a computer policy setting:
9 Step 2: Group policy setting Apply the following smart card group policy settings to the computer through a user policy setting or through a computer policy setting: • Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options - Inter- active Logon: Require smart car...
Page 10 - Step 3: HP blade PC middleware configuration; The following provides HP blade PC software configuration:; Step 4: Client smart card driver configuration; tions for CE
10 Step 3: HP blade PC middleware configuration The following provides HP blade PC software configuration: • For the purposes of this white paper, an HP CCI implementation with the hardware and software components listed in “Reference hardware and software” on page 2 was used. • Install one of the f...
Page 11 - Smart card setup; Start
11 • USB CAC approved smart card reader (SCM Microsystems SCR331 Reader) Driver: SCR33X2K.sys, version 4.27.00.01NOTE: For Microsoft Windows CE.NET, you may need to copy the drivers from the folder where they were installed ( \Windows ) to the \Hard Disk\Program Files folder so the drivers will be w...
Page 16 - Requesting a certificate from the blade PC; work administrator. In this example, the address used is; Request a Certificate; On the Request a Certificate page, click; advanced certificate request; On the Advanced Certificate Request page, select; Create and submit a request to this CA; as the certificate template.; ActivCard Gold Cryptographic Service Provider
16 Requesting a certificate from the blade PC 1. Open Internet Explorer and go to the Certification Server enrollment Web site. The address of this Web site was determined when the Certification Server was set up (see “Step 1: Configuring a Certif- icate Authentication (CA) service” on page 4). If y...
Page 17 - to continue with the; . This command installs the users’s certificate onto the smart card.; Yes; to continue with the
17 6. If a warning message displays about a potential scripting violation, press Yes to continue with the certificate request. 7. After the system generates the public and private keys, the page to install the certificate displays. Select Install this certificate . This command installs the users’s ...
Page 18 - In the right pane, select the; My Certificates; icon. The system displays the username ID.
18 To verify that the CCI SmartCard Logon certificate for the user is installed on the smart card: 1. Click the ActivCard icon in the system tray to open the ActivCard Gold utility. 2. In the right pane, select the My Certificates icon. The system displays the username ID. 3. Select the username ID ...
Page 19 - Usage cases; HPSAM client; Log out of the RDP session.
19 Usage cases Usage case 1: User authentication from client device to blade PC using RDP The following steps provides instructions for performing a functional test of the CCI SmartCard Logon cer- tificate: 1. Log out of the RDP session. 2. Open the Remote Desktop Communications window and initiate ...
Page 20 - Type the PIN that you assigned. The user is logged into the blade PC.; Usage case 3: Accessing secure Web site; nect to a Web page on the same server as the secure Web site.
20 2. Open the HPSAM client window and initiate a connection to the blade PC. 3. Make sure a smart card is installed in the reader. The system requests the smart card PIN. 4. Type the PIN that you assigned. The user is logged into the blade PC. Usage case 3: Accessing secure Web site The following s...
Page 22 - Work
22 4. In the Company Name box, type the name for the VPN connection (for example, Work ), and then click Next . 5. Select Do not dial the initial connection , and then click Next . 6. In the text box, type the host name or IP address of the VPN tunnel, and then click Next . 7. Select Use my smart ca...
Page 23 - Verifying username and password
23 2. Right-click on the VPN connection icon and select Properties . You can initiate the VPN connection after setting it up, as follows: 1. Start the VPN connection. 2. In Smart card PIN , type the PIN, and then click OK . While establishing the VPN connection, the system displays Verifying usernam...
Page 24 - Additional information; For more information about ActivCard, see
24 After the connection is established, the network connection icon displays in the system tray. Additional information For more information about HP Consolidated Client Infrastructure, see http://h71028.www7.hp.com/ enterprise/cache/9885-0-0-225-121.html. For more information about ActivCard, see h...
