Configure smart card remote access

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To configure smart card remote access

  1. Open Routing and Remote Access.

  2. Right-click the name of the remote access server, and then click Properties.

  3. On the Security tab, click Authentication Methods.

  4. In the Authentication Methods dialog box, confirm that the Extensible authentication protocol (EAP) check box is selected, click OK, and then click OK again.

  5. In the console tree, click Remote Access Policies.

    Where?

    • Routing and Remote Access/ServerName/Remote Access Policies
  6. In the details pane, right-click the remote access policy that your smart card remote access clients will use, click Properties, and then click Edit Profile.

  7. On the Authentication tab, click EAP Methods.

  8. In Select EAP Providers, click Add.

  9. Click the smart card EAP method you want to use, and then click OK.

  10. If the smart card EAP method you added requires a certificate, click the method, click Edit, and choose a certificate.

  11. Click OK to save the settings of the profile, and then click OK again to save the settings of the policy.

Note

  • To perform this procedure, you must be a member of the Administrators group. As a security best practice, consider using the Run As command rather than logging on with administrative credentials. If you have logged on with administrative credentials, you can also open Routing and Remote Access by clicking Start, clicking Control Panel, double-clicking Administrative Tools, and then double-clicking Routing and Remote Access. For more information, see Default local groups, Default groups, and Using Run as.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Working with MMC console files
Using smart cards for remote access
Enable the IAS server to read user accounts in Active Directory