[Spice-devel] Windows 10: Smartcard is not redirected

[David Jaša]

On Thu, 2017-07-20 at 15:42 +0200, David Jaša wrote:
> Hi Oscar,
> 
> spice client uses on Windows also NSS library to access smart cards,
> so you need to tell NSS where to look for library that provides
> pkcs#11 interface (or "smart card middleware") for your smart card.
> Once you know the .dll, you can create the nssdb and add the library
> there:
> 
> mkdir %PROGRAMFILES%\nssdb%PROGRAMFILES%\VirtViewer*\bin\certutil -d
> %PROGRAMFILES%\nssdb -N%PROGRAMFILES%\VirtViewer*\bin\modutil -dbdir
> %PROGRAMFILES%\nssdb -add "my smartcard middleware" -libfile
> C:\...\my_middleware_pkcs11_library.dll

The path for nssdb should be actually %PROGRAMDATA%\nssdb, so on most
systems C:\ProgramData\nssdb. Sorry for the mistake.
David
> With these steps taken, remote-viewer should pick you smartcard and
> expose it in the guest.
> 
> HTH,
> 
> David
> 
> 
> On Mon, 2017-05-08 at 13:48 +0200, Oscar Segarra wrote:
> > Hi, 
> > In my environment I have a Windows 10 guest and a Windows 10
> > client.
> > 
> > I have configured smartcard as it is suggested in documentation:
> > 
> > https://www.spice-space.org/spice-user-manual.html
> > 
> > <controller type='ccid' index='0'/>
> > <smartcard mode='passthrough' type='spicevmc'>
> >   <address type='ccid' controller='0' slot='0'/>
> > </smartcard>
> > I can see on virt-manager the controller and the devices correctly
> > added. Even in guest Windows 10 appears the ccid smartcard reader
> > device.
> > 
> > I launch my remote-viewer.exe with the following parameters:
> > 
> > remote-viewer.exe -f --spice-smartcard
> > 
> > But when I connect my smartcard in the client, it is not redirected
> > to the guest.
> > 
> > Is there any documentation about how to redirect my smartcard with
> > authentication/sign certificate?
> > 
> > Thanks a lot.
> >  
> > 
> > 
> > 
> > 
> > _______________________________________________
> > Spice-devel mailing list
> > Spice-devel at lists.freedesktop.org
> > https://lists.freedesktop.org/mailman/listinfo/spice-devel
> _______________________________________________
> Spice-devel mailing list
> Spice-devel at lists.freedesktop.org
> https://lists.freedesktop.org/mailman/listinfo/spice-devel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/spice-devel/attachments/20170720/29c55d0c/attachment.html>