SecureCRT/Putty USB eToken auth via SSL/TLS certificate

After enabling authentication using SSH keys you may want to use certifiate on very strong and secure storage — USB token. Read the following info to be able that.

Prerequirements

Putty

It’s simple. Just use tweaked version Putty-CAC, it’s available on Github.

 

SecureCRT

In case of VanDyke product you have to enable driver support. Check if you have file C:\\Windows\\System32\\eTPKCS11.dll by exec the command (Win+R):

cmd /c dir C:\\Windows\\System32\\eTPKCS11.dll & pause

If you haven’t install SafeNet Authentication Client

 

Configuring

To provide using Aladdin USB token certificate for ssh authorization you need to edit you Session/Global Options in Options menu.

Choose «Use identity or certificate file» radio button and paste text «pkcs11key::prov=C:\\Windows\\System32\\eTPKCS11.dll»

Internal sites don’t work at Internet Explorer after Microsoft updates 10.10.2012

Microsoft released security update http://support.microsoft.com/kb/2661254/, which block using of RSA certificates that have keys that are less than 1024 bits.

You should check on other browser (Opera, Firefox, Chrome) that problem site is working. Also you should inspect which certificate has a key less 1021 bits: i may be site, Intermediate  CA or Root CA:

 

If you have that, you should change it to certificate with more strong security (2048 or 4096 bits).