Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Smartcard logon with RFC822


Summary

As per http://msdn.microsoft.com/en-us/library/bb905527.aspx one of the possible mapping methods for smartcard logons is to use RFC822 information from the smartcard logon certificate to log on to Active Directory if the Domain Controllers are Windows 2008 or later.

To accomplish this it's required to import the Subject Alternative Name information from the smartcard logon certificate to the AltSecurityIdentities attribute of each user account that is to be associated with such a smartcard certificate.

RFC822 name mapping is an explicit mapping type, the user account's altSecurityIdentities attribute needs to be populated with “X509: <RFC822>subjectAltName” from the user’s smartcard certificate.

There is no implicit mapping in AD from the users email name to the RFC822 name.

↑ Back to the top


Keywords: vkball, kb

↑ Back to the top

Article Info
Article ID : 2019545
Revision : 1
Created on : 1/8/2017
Published on : 8/22/2012
Exists online : False
Views : 106