Protect a document with SmartCard ?

Does anybody knows a way to protect a MS document (Word or Excell or
whatever) with a Smart Card ?
As I understood, the MS Office uses CryptoAPI in order to en/decrypt the
document when protecting it by password.
Therefore I assume that forcing it to use a Smart Card CSP might do the job.
But I don`t know how to do it. Is there some default CSP that Word uses ? So
that I could only change a registry entry ?

Krish
Wed Jan 28 17:25:17 CST 2004

If the only cert in your personal store that has the EFS EKU uses the
smartcard CSP then it should work.
For Windows Server 2003 domains you could configure the users in your domain
to automatically enroll for an EFS certificate that uses a smartcard CSP.

http://www.microsoft.com/windowsserver2003/technologies/pki/default.mspx has
articles on smartcard and EFS


--
Krish Shenoy[MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
"Ruslan" <yruslan$optisign.net> wrote in message
news:%23BO$EMa5DHA.1936@TK2MSFTNGP12.phx.gbl...
> Does anybody knows a way to protect a MS document (Word or Excell or
> whatever) with a Smart Card ?
> As I understood, the MS Office uses CryptoAPI in order to en/decrypt the
> document when protecting it by password.
> Therefore I assume that forcing it to use a Smart Card CSP might do the
job.
> But I don`t know how to do it. Is there some default CSP that Word uses ?
So
> that I could only change a registry entry ?
>
>

S
Thu Jan 29 03:07:23 CST 2004

Krish,

Are you sure that EFS certificate can reside on smartcard in W2K3? I thought
that's not possible as yet.

--
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-

"Krish Shenoy[MSFT]" <kshenoy@online.microsoft.com> wrote in message
news:udHkCaf5DHA.2776@TK2MSFTNGP09.phx.gbl...
> If the only cert in your personal store that has the EFS EKU uses the
> smartcard CSP then it should work.
> For Windows Server 2003 domains you could configure the users in your
domain
> to automatically enroll for an EFS certificate that uses a smartcard CSP.
>
> http://www.microsoft.com/windowsserver2003/technologies/pki/default.mspx
has
> articles on smartcard and EFS
>
>
> --
> Krish Shenoy[MSFT]
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> "Ruslan" <yruslan$optisign.net> wrote in message
> news:%23BO$EMa5DHA.1936@TK2MSFTNGP12.phx.gbl...
> > Does anybody knows a way to protect a MS document (Word or Excell or
> > whatever) with a Smart Card ?
> > As I understood, the MS Office uses CryptoAPI in order to en/decrypt the
> > document when protecting it by password.
> > Therefore I assume that forcing it to use a Smart Card CSP might do the
> job.
> > But I don`t know how to do it. Is there some default CSP that Word uses
?
> So
> > that I could only change a registry entry ?
> >
> >
>
>

Drew
Thu Jan 29 20:17:08 CST 2004

EFS can only use the Microsoft Base and Enhanced CSPs at present. It's not
so much that an EFS cert can't be on the smartcard - EFS just won't be able
to use it.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


"Paul Adare - MVP - Microsoft Virtual PC" <padare@newsguy.com> wrote in
message news:MPG.1a82a76ffb65905598982b@msnews.microsoft.com...
> In article <#pTd6ek5DHA.2692@TK2MSFTNGP09.phx.gbl>, in the
> microsoft.public.security news group, S. Pidgorny <MVP>
> <slavickp@yahoo.com> says...
>
> > Are you sure that EFS certificate can reside on smartcard in W2K3? I
thought
> > that's not possible as yet.
> >
>
> Correct. An EFS cert cannot be stored on a smart card.
>
> --
> Paul Adare
> Moral indignation is jealousy with a halo.
> H. G. Wells, The Wife of Sir Isaac Harman