Re: Windows 10: Smartcard is not redirected

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 2017-07-20 at 15:42 +0200, David Jaša wrote:
Hi Oscar,

spice client uses on Windows also NSS library to access smart cards, so you need to tell NSS where to look for library that provides pkcs#11 interface (or "smart card middleware") for your smart card. Once you know the .dll, you can create the nssdb and add the library there:

mkdir %PROGRAMFILES%\nssdb
%PROGRAMFILES%\VirtViewer*\bin\certutil -d %PROGRAMFILES%\nssdb -N
%PROGRAMFILES%\VirtViewer*\bin\modutil -dbdir %PROGRAMFILES%\nssdb -add "my smartcard middleware" -libfile C:\...\my_middleware_pkcs11_library.dll

The path for nssdb should be actually %PROGRAMDATA%\nssdb, so on most systems C:\ProgramData\nssdb. Sorry for the mistake.

David


With these steps taken, remote-viewer should pick you smartcard and expose it in the guest.

HTH,

David


On Mon, 2017-05-08 at 13:48 +0200, Oscar Segarra wrote:
Hi, 

In my environment I have a Windows 10 guest and a Windows 10 client.

I have configured smartcard as it is suggested in documentation:


<controller type='ccid' index='0'/>
<smartcard mode='passthrough' type='spicevmc'>
  <address type='ccid' controller='0' slot='0'/>
</smartcard>
I can see on virt-manager the controller and the devices correctly added. Even in guest Windows 10 appears the ccid smartcard reader device.

I launch my remote-viewer.exe with the following parameters:

remote-viewer.exe -f --spice-smartcard

But when I connect my smartcard in the client, it is not redirected to the guest.

Is there any documentation about how to redirect my smartcard with authentication/sign certificate?

Thanks a lot.
 


_______________________________________________
Spice-devel mailing list
Spice-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.freedesktop.org/mailman/listinfo/spice-devel
_______________________________________________
Spice-devel mailing list
Spice-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.freedesktop.org/mailman/listinfo/spice-devel
_______________________________________________
Spice-devel mailing list
Spice-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.freedesktop.org/mailman/listinfo/spice-devel

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]     [Monitors]