|
![]()
I have a web server running IIS 6 (sorry, UNIX guys!). I'd like to secure the access of my site to only some users.
In my wildest dreams, I'd like my users to have a USB key with a key/certificate on it, then they could plug it in any PC and, if the certificate is not blacklisted or expired, the users could access my site. Otherwise, it would be blocked.
I'd like the user interaction to be minimal, from the time they plug in the USB key. So, I'd like to avoid any configuration on the part of the users.
Ideally, the solution should work on both Internet Explorer 6 and Firefox.
Any ideas how I could make this happen? Thank you in advance for the detailed steps!
How do I secure my web server using a certificate on a USB key?
If you're using some type of RSA client certificate key, then they may need to interact a little and just provide the key, they need to browse to the location of the certificate (USB drive) when asked by your server. Or, you can map the user cert to the account itself.
this should get you started:
http://rsasecurity.agora.com/rsasecured/...
|
