Compaq t5720 Implementing ActivIdentity Smart Cards for Use with HP Compaq t57 - Page 1

Compaq t5720 - Thin Client Manual

Page 1 highlights

Implementing ActivIdentity Smart Cards for Use with HP Compaq t5720 Thin Clients and HP Blade PCs Introduction 2 Prerequisites 2 Reference hardware and software 3 Reference Documents 4 Client Software Configuration 5 Installing ActivClient PKI Only 5 Initializing the smart card 8 Server Software Configuration 9 Installing Microsoft Certificate Services 9 Configuring a Certificate Authority (CA) service 13 Configuring Microsoft Certificate Authority to Issue Smart Card User Certificate 18 Manually issue Smart Card User Certificate 24 Smart Card Validation 27 Testing the Smart Card 27 Troubleshoot ActivClient 28 Additional information 29 Using a Smart Card For Windows Network Login 29 Working with ActivClient PKI Only 6.0 Libraries 29 Usage cases 31 Usage case 1: User authentication from HP blade PC to Active Directory Domain 31 Usage case 2: User authentication from client device to blade PC or Active Directory Server using RDP 32 Usage case 3: User authentication from client device to HP blade PC or Active Directory Server using the HP SAM client 32 Usage case 4: Accessing secure Web site 34 Usage case 5: User authentication using VPN through firewall to HP blade PC or Active Directory Server 35 Usage case 6: User authentication from client device using Citrix server 38 Acronyms 40 Service and Support 41

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41

Implementing ActivIdentity Smart Cards for Use with
HP Compaq t5720 Thin Clients and HP Blade PCs
Introduction
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
Reference hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3
Reference Documents
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4
Client Software Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Installing ActivClient PKI Only . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Initializing the smart card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Server Software Configuration
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
Installing Microsoft Certificate Services
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
Configuring a Certificate Authority (CA) service
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Configuring Microsoft Certificate Authority to Issue Smart Card User Certificate
. . . . . . . . .18
Manually issue Smart Card User Certificate
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
Smart Card Validation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Testing the Smart Card
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Troubleshoot ActivClient . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
Additional information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
Using a Smart Card For Windows Network Login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
Working with ActivClient PKI Only 6.0 Libraries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
Usage cases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
Usage case 1: User authentication from HP blade PC to Active Directory Domain . . . . . . . .31
Usage case 2: User authentication from client device to blade PC or Active Directory
Server using RDP
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Usage case 3: User authentication from client device to HP blade PC or Active Directory
Server using the HP SAM client
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Usage case 4: Accessing secure Web site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Usage case 5: User authentication using VPN through firewall to HP blade PC or Active
Directory Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Usage case 6: User authentication from client device using Citrix server
. . . . . . . . . . . . . .38
Acronyms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Service and Support
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41