This is a basic guide for anyone who isn't familiar with how the SmartCard authentication works when using DameWare Mini Remote Control. A very common misunderstanding is that you have to perform an advanced configuration in order to get this working. In practice, once the SmarCard authentication is integrated in the domain's security, DameWare will just provide the necessary resource to use it in order to start the remote session.
For details about the technology, refer to the following article:
http://www.dameware.com/support/kb/article.aspx?ID=300080
Here is basically how it works:
Step #1: Launch the Mini Remote Control program. Provided at least one Smart Card reader is currently attached to your local machine, you will now see the additional "Smart Card Logon" option appear in the authentication drop down list in the Remote Connect dialog.
Step #2: Select the "Smart Card Logon" authentication method in the Remote Connect dialog. When the Password field changes to PIN, enter your PIN number into the Remote Connect dialog.
Step #3: Now just click on the Connect button. If a Smart Card is not currently detected, the MRC software will prompt you to insert your Smart Card now. Or if more than one reader is attached, then the MRC software will prompt you to select which reader to use.
Single Reader:
Multiple Reader:
Step #4: Now that a reader has been selected and a Smart Card has been detected, just click on the OK button to initiate your connection request. If this is your first time connecting to this machine via the Mini Remote Control program's Smart Card functionality, then the MRC software will notify you that it's Configuring the remote system for first time use of the Remote Smart Card Logon Process.
After the "first time use" configuration has been completed, the MRC software will notify you that the Smart Card authentication process has begun.
After the "first time use" configuration has been completed, the MRC software will notify you that the Smart Card authentication process has begun.
Once Smart Card authentication has completed, you should be connected to the desktop on the remote machine, and depending on the current desktop state, you will either see the User's desktop or you will be prompted with the PIN dialog so you can login.
However, if for some reason the PIN dialog is not automatically displayed you can also click on the Send menu and select the Send Smart Card Login option. This will send a Smart Card Login request to the remote machine, which should instruct the O/S to display the PIN dialog.
Things to take in consideration:
- The MRC Client Agent must include the SmartCard Driver.
- Depending on your security environment FIPS modules may be needed to handle encryption.