This is an old revision of the document!

SSH

SSH and SCP on Windows with smartcard authentication

Get pageant from putty-cac
Import a smartcart certificate
- Run pageant.exe
- Right click pageant try icon
- Add CAPI cert
- Choose certificate
Automatically import a smartcard certificate:
- Get fingerprint from certificate
  - certmgr.msc
  - Browse to certificate, e.g. Own Certificate | Certificate
  - Open certificate by double-clicking or right-click and “Open”
  - Details | Fingerprint
- Run: pageant.exe CAPI:User\MY\{fingerprint}
PuTTY using smartcard authentication
- Ensure that pageant.exe is still running in the system tray
- Run Putty
- Connection | SSH | Auth | [x] Attempt authencation using Pageant
- Optionally disable “Attempt keyboard-interactive auth (SSH-2)” to prevent a password login and force the smartcard use
- Optionally enable “Allow agent forwarding” to enable further logins via smartcard authentication
PLink using smartcard authentication
- Ensure that pageant.exe is still running in the system tray
- plink.exe -agent user@host
- Optioanlly use -A for agent forwarding
WinSCP using smartcard authentication:
- Ensure that pageant.exe is still running in the system tray
- Advanced settings | SSH | Authentication | [x] Try authentation using Pageant
- Optionally disable “Attempt keyboard-interactive Authentication” to prevent a password login and force the smartcard use