12-09-2010 11:45 PM
I have a new T410 which has a smart card reader. I have no smart cards and really don't know much about them. I do like the idea of using a smart card for added security.
How can I get setup with a smart card for logon & encryption? What hardware/software?
Any tips greatly appreciated.
Solved! Go to Solution.
01-06-2011 11:32 PM
I would like to know this as well since I thought the system would include one (HP includes them with their notebooks with this option) and I am planning on ordering a T510 with this option in the coming weeks.
01-07-2011 12:22 PM
01-24-2011 05:40 PM
I ordered a T410 from the online Lenovo site and the only option was a contactless smart card rather than a 5-in-1 card reader. Not knowing how this works, I paid for the small price for this reader.
Now I would like to know what size of memory card this works with.
SD cards are more prevalent and when I googled for smart card, the largest capacity is about 32Mb and this is small.
Are you able to provide some information on smart card usage?
01-29-2011 03:41 AM
01-29-2011 03:57 AM
This is a smart card (CAC card really but the same thing). That chip on the front is similar to the type of chip that SIM cards use. You attach the card to your account and use it as a physical security credential that must be produced in order to login.
01-31-2011 02:50 PM
Where can one obtain these smart cards? I'd like to get one and experiment with using it for my laptop for authentication and encryption. I've found the .NET card from Gemalto which can be order online, and it seems that it would do the trick, but I'm not sure. Wondering what other sources there are and how easy this is to setup and use for a single machine without an IT department to support me.
01-31-2011 03:46 PM - last edited on 03-08-2012 07:36 AM by Cleo_Lenovo
Any ISO 7816 compliant card should would work. The ACOS5 64/72KB PKI Card looks like a good one to get, appears to be designed for exactly this use. I think you can configure the card with ThinkVantage Client Security Solution, I'm not positive though since my T510 is still waiting on customs.
EDIT: I just found a list of supported smart cards on Lenovo's web site. I'm not sure if this list is up to date.
Suported smart cards types
Due to configuration requirements, only Softex smart cards are supported by this middleware. This version supports the following smart cards:
03-22-2011 10:16 AM - edited 03-22-2011 10:24 AM
Yea, if you purchased the common expresscard 54 smart card readers, those are mostly designed for ISO 7816 compliant smart cards.
So now you need smart cards your card reader can accept, so as mentioned above, you can get the ACOS5 PKI cards:
http://www.acs.com.hk (buy direct or via some third parties vendors)
or also the .Net Gemalto cards,
www.gemalto.com/ (buy direct)
or also Raak Smart Cards,
http://www.raaktechnologies.com/ (buy direct)
or there are other OEM smart card manufacturers that can do customization for you if you are ordering in bulk, etc. Just make sure they specify specifically ISO 7816 compliant cards as there are many smart card standards.
Software wise, Windows 7 has a lot of smart card support including certificate enrollment, etc. Sometimes you may need their manufacturer specific minidrivers and management software, etc. If you want to stay mostly with microsoft products with less reliance on third parties, the gemalto .net cards are perhaps most windows 7 natively supported cards as they come.
As for uses of smart cards, you can use them to store certificates that are used for authentication (windows logon or VPN) or email or file encryption etc. Windows can be logged on natively using smart cards (goto group policy to turn this on) Alternatively you can use Thinkvantage client security to enroll your smart cards also.