I'm not sure what the USB/CD suggestion was, actually. You just can't stick a cert somewhere and "autorun" it into the smartcard service. I got some suggestions offline, but they were not exactly what I was looking for. Looks like I'll just have to go the hardware route.

t

> -----Original Message-----

> From: listbounce (at) securityfocus (dot) com [email concealed]

> [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of Jim Harrison

> Sent: Wednesday, August 29, 2007 5:47 PM

> To: Jex; focus-ms (at) securityfocus (dot) com [email concealed]

> Subject: RE: Software smart-card emulation

>

> FWIW, Tim & are seeking different variations on the same theme.

> Since I work mostly in virtual machines, I need something that's

> strictly software.

> I *can* set up a dedicated machine to get USB ports, but that's a huge

> pain now.

>

> Jim

>

> -----Original Message-----

> From: listbounce (at) securityfocus (dot) com [email concealed]

> [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of Jex

> Sent: Wednesday, August 29, 2007 1:25 PM

> To: focus-ms (at) securityfocus (dot) com [email concealed]

> Subject: Re: Software smart-card emulation

>

> I'm no expert, hardly, but I imagine you can do something custom with

> mini-CDs, CDs, floppys, or USB keys that hold the certificate data,

> and just set the authenticating machine to run the auto-play through

> the authenticating program, with the added benefit that they can

> function like a USB dongle-lock, so the computers won't function if

> they don't have the cd/usb key/etc.

>

> Just my two cents

> John Calvin

>

> On 8/28/07, Thor (Hammer of God) <thor (at) hammerofgod (dot) com [email concealed]> wrote:

> > Greetings security professionals:

> >

> > Has anyone worked with a software Smart Card emulation package they

> can

> > recommend? The goal is to test different "client authentication"

> > Windows smart card implementations without having to go out and

> purchase

> > the actual physical hardware (and cards) to do so. Basically, I want

> > something that will let me offer up a cert to a server/service as if

> it

> > were a "smart card."

> >

> > tia

> > t

> >

> > -----------------------------

> > vinni, viddi, vinni denuo

> >

> >

>

> All mail to and from this domain is GFI-scanned.

[ reply ]