question

PinoGIAIMO-9796 avatar image
0 Votes"
PinoGIAIMO-9796 asked Miles-MSFT answered

How to disallow the reading of certificates from smart cards when invoking a site with https

Hi, we have a PC running Windows 7 Pro with SP1. Every time we call the URL of our site https://passaporti.cen.poliziadistato.it/passaweb and we have a smart card inserted, the pc scans the smart card for client certificates even if there is only authentication of the server. This results in a slowdown in the call to the site. Is it possible to avoid smart card scanning unless explicitly requested?

windows-7
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

Miles-MSFT avatar image
0 Votes"
Miles-MSFT answered

Hi

From Microsoft documentation, Certificate Propagation Service , we are afraid that after smart card is inserted , scanning could not be avoided.

115331-71602.png


Certificate Propagation Service
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ff404288(v=ws.10)?redirectedfrom=MSDN

Also , if we want to make some changes to smart card group policy and registry settings, this link will be useful:
ff404287(v=ws.10)

Best Regards


If the Answer is helpful, please click "Accept Answer" and upvote it.



71602.png (7.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.