Request certificate for virtual smart card from third party CA
-
Monday, December 24, 2012 9:02 AM
Hi!
I would like to use third party CA certificate with virtual smart card. How can I make offline request for this type of certificate?
Thanks!,
UV
- Moved by Nicholas LiMicrosoft Contingent Staff Tuesday, December 25, 2012 6:41 AM (From:Windows 8 Security)
All Replies
-
Tuesday, December 25, 2012 7:19 AM
These links might be helpful:
Using Virtual Smart Cards with Windows 8
Understanding and Evaluating Virtual Smart Cards
http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=29076
Niko
- Proposed As Answer by K_evin ZhuMicrosoft Contingent Staff, Moderator Wednesday, December 26, 2012 1:51 AM
- Marked As Answer by K_evin ZhuMicrosoft Contingent Staff, Moderator Thursday, December 27, 2012 2:10 AM
- Unmarked As Answer by urmasv Thursday, December 27, 2012 12:02 PM
-
Thursday, December 27, 2012 2:09 AMModerator
Hi,
As this thread has been quiet for a while, we will mark it as ‘Answered’ as the information provided should be helpful. If you need further help, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish.
BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts.
Best Regards
KevinIf you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
-
Thursday, December 27, 2012 12:06 PM
Hi!
Actually those articles describe how VSC works with W8 in MS environment (MS CA). My question was about how to request smart card user (or logon) certificate for virtual smart card from third party CA.
Thanks,
UV
-
Friday, December 28, 2012 3:26 AMModerator
Hi,
Thank you for clarifying the issue for us.
I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
Thank you for your understanding and support.
Regards
Kevin
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
-
Monday, December 31, 2012 8:55 AM
you can contact the 3rd party CA to know how can you generate and submit your request.
Generally, we can request cert by web enrollment, you can contact CA to know the URL.
we can also generate request file by command certreq and send request file to CA.
Certreq.exe Syntax
http://technet.microsoft.com/en-us/library/cc736326(WS.10).aspx
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
- Proposed As Answer by K_evin ZhuMicrosoft Contingent Staff, Moderator Wednesday, January 02, 2013 6:40 AM
-
Thursday, January 03, 2013 3:55 AM
Hi!
Yes, I can make custom request to third party CA with certreq or from certificates console GUI. Nice. I also have neccessary certificate from this CA already, this certificate has Smart Card Logon and ClientAuthentication EKUs. And I also have virtual smart card created in my Windows 8 machine.
Now adjusted question: Is it possible to deploy certificate to virtual smart card with certreq command?
(I can easily install this certificate to my personal store. But I want to use it with VSC.)
Thanks,
UV
-
Friday, January 04, 2013 11:42 AM
Since the virtual smart card is really no different than a MS Base CSP smart card, you can use the procedures in this article to inject the P12 file you have into the virtual smart card
http://wiki.mysmartlogon.com/Save_a_pfx_file_to_a_smart_card
Remember that you must first set up the virtual smart card.
Brian
- Marked As Answer by urmasv Tuesday, January 08, 2013 8:45 AM
-
Tuesday, January 08, 2013 8:46 AMThanks Brian! It works!
UV
-
Wednesday, January 09, 2013 9:57 AMPlease open a thread for the new question
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

