RE: Software smart-card emulation

I'm not sure what the USB/CD suggestion was, actually.  You just can't stick a cert somewhere and "autorun" it into the smartcard service. I got some suggestions offline, but they were not exactly what I was looking for.  Looks like I'll just have to go the hardware route.

t

> -----Original Message-----
> From: [email protected]
> [mailto:[email protected]] On Behalf Of Jim Harrison
> Sent: Wednesday, August 29, 2007 5:47 PM
> To: Jex; [email protected]
> Subject: RE: Software smart-card emulation
> 
> FWIW, Tim &  are seeking different variations on the same theme.
> Since I work mostly in virtual machines,  I need something that's
> strictly software.
> I *can* set up a dedicated machine to get USB ports, but that's a huge
> pain now.
> 
> Jim
> 
> -----Original Message-----
> From: [email protected]
> [mailto:[email protected]] On Behalf Of Jex
> Sent: Wednesday, August 29, 2007 1:25 PM
> To: [email protected]
> Subject: Re: Software smart-card emulation
> 
> I'm no expert, hardly, but I imagine you can do something custom with
> mini-CDs, CDs, floppys, or USB keys that hold the certificate data,
> and just set the authenticating machine to run the auto-play through
> the authenticating program, with the added benefit that they can
> function like a USB dongle-lock, so the computers won't function if
> they don't have the cd/usb key/etc.
> 
> Just my two cents
> John Calvin
> 
> On 8/28/07, Thor (Hammer of God) <[email protected]> wrote:
> > Greetings security professionals:
> >
> > Has anyone worked with a software Smart Card emulation package they
> can
> > recommend?  The goal is to test different "client authentication"
> > Windows smart card implementations without having to go out and
> purchase
> > the actual physical hardware (and cards) to do so.  Basically, I want
> > something that will let me offer up a cert to a server/service as if
> it
> > were a "smart card."
> >
> > tia
> > t
> >
> > -----------------------------
> > vinni, viddi, vinni denuo
> >
> >
> 
> All mail to and from this domain is GFI-scanned.