Configure PIV smart card authentication 编辑

This article lists the configuration required on the Director Server and in Active Directory to enable the smart card authentication feature.

Note:

Smart card authentication is supported only for users from the same Active Directory domain.

Director server configuration

Perform the following configuration steps on the Director server:

1. Install and enable the Client Certificate Mapping Authentication. Follow the Client Certificate Mapping authentication using Active Directory instructions in the Microsoft document, Client Certificate Mapping Authentication.

2. Disable Forms Authentication on the Director site.

   Start IIS Manager.

   Go to Sites > Default Web Site > Director.

   Select Authentication.

   Right-click Forms Authentication, and select Disable.

   

3. Configure the Director URL for the more secure https protocol (instead of HTTP) for client certificate authentication.

   1. Start IIS Manager.

   2. Go to Sites > Default Web Site > Director.

   3. Select SSL Settings.

   4. Select Require SSL and Client certificates > Require.

   

4. Update web.config. Open the web.config file (available in c:\inetpub\wwwroot\Director) using a text editor.

Under the <system.webServer> parent element, add the following snippet as the first child element:

<defaultDocument>
   <files>
       <add value="LogOn.aspx"/>
   </files>
</defaultDocument>