HP T5720 - Compaq Thin Client

Implementing Gemalto Smart Card for Use with HP Compaq
t5720 and HP CCI
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
Reference hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3
Reference Documents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4
Installing GemSafe Libraries 5.0 SE to Server and Client PCs (Optional) . . . . . . . . . . . . . . . . . .5
Installing Microsoft Certificate Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Configuring a Certificate Authority (CA) service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Configuring Microsoft Certificate Authority to Issue Smart Card User Certificate . . . . . . . . . . . .18
Manually issue Smart Card User Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
Testing the Smart Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Creating Customized User Install Packages for Clients PCs (Optional) . . . . . . . . . . . . . . . . . . .30
Additional Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Using a Smart Card For Windows Network Login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Administration of the GemSafe Smart Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Working with GemSafe Libraries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36
Usage cases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37
Usage case 1: User authentication from blade PC to Active Directory Domain . . . . . . . . . .37
Usage case 2: User authentication from client device to blade PC or
Active Directory Server using RDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Usage case 3: User authentication from client device to blade PC or
Active Directory Server using HPSAM client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
Usage case 4: Accessing secure Web site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39
Usage case 5: User authentication using VPN through firewall to blade PC or
Active Directory Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Usage case 6: User authentication from client device using Citrix server . . . . . . . . . . . . . . 43
Service and Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45

HP T5720 - Compaq Thin Client Specifications

General

Brand	HP
Model	T5720 - Compaq Thin Client
Category	Server
Language	English

Summary

Introduction

Prerequisites

Reference Hardware and Software

Reference Documents

Install GemSafe Libraries 5.0 SE

Install Microsoft Certificate Services

Configure Certificate Authority Service

Configure CA to Issue Smart Card User Certificate

Manually Issue Smart Card User Certificate

Test Smart Card Functionality

Create Customized Client Install Packages

Additional Information

Smart Card for Windows Network Login

Details the process of using a smart card for Windows network logon authentication.

GemSafe Smart Card Administration

Covers managing GemSafe smart cards and certificates using the GemSafe ToolBox.

Working with GemSafe Libraries

Points to resources for managing smart cards and certificates with GemSafe Libraries.

Blade PC to Active Directory Authentication

Client to BladeAD via RDP Authentication

Client to BladeAD via HPSAM Authentication

Accessing Secure Web Sites

VPN Authentication to BladeAD

Client to Server via Citrix Authentication

Service and Support