Smartcard login to Windows

[googlemad]

Does anyone have experience of setting up Active Directory so that users can simply insert their smart card, enter their PIN code (on the smart card) and that will log them in to Windows?

 

The smart cards in question are NHS Care Identity Service ones, which enable login to other NHS systems such as ESR and SystemOne, but I'm now being asked if they can be used for Windows too!

[DrBeaker]

Not myself no - but always been interested to see if it could be adopted within schools.

 

Probably going to have to pay for those DELL keyboards with the card reader though? That's going to be a big factor and looks like they're gonna be £30 upwards compared to £5-10 for a normal keyboard that I assume you're currently using. Or an external card reader.

 

Either way that's additional costs on top, probably not gonna be cheap.

[HPlum78]

Just to understand are these cards actually being used within the NHS? Or you just want to use the same style cards?

[MatthewL]

Yes the NHS smartcard can be used, former colleagues of mine have written a certificate (think its only new cards have the space for multiple certificates) and it allows them to and the use it for DA authentication also.

 

If they are used in NHS all PC's have smartcard keyboards as a rule or a card reader.

[HPlum78]

Clearly there is no technical issue with using the same type card (the NHS use them!) I have just been looking at the policies around the use of them and hijacking them would certainly put NHS staff in line of a disciplinary. Just because we can does not mean we should and all that. I would contact the trust IT services directly before you start to get a steer from them. If this is indeed your intentions.