Accedere ai computer di dominio di Windows con MS Active Directory

Nitrokey 3	Nitrokey Passkey	Nitrokey FIDO2	Nitrokey U2F	Nitrokey HSM 2	Nitrokey Pro 2	Nitrokey Start	Nitrokey Storage 2
✓	⨯	⨯	⨯	✓	✓	✓	✓

1. Scaricare e installare l’ultima ` OpenSC <https://github.com/OpenSC/OpenSC/wiki>`_.

2. Use a text editor to add the following settings to C:\Program Files:\OpenSC Project\OpenSC\opensc.conf.

   # Nitrokey Pro 2, OpenPGP Card, Nitrokey Storage 2
   card_atr 3b:da:18:ff:81:b1:fe:75:1f:03:00:31:f5:73:c0:01:60:00:90:00:1c  {
           type = 9002;
           driver = "openpgp";
           # name = "Nitrokey Pro 2";
           md_read_only = false;
           md_supports_X509_enrollment = true;
   }
   # Nitrokey Pro, OpenPGP Card
   card_atr 3B:DA:18:FF:81:B1:FE:75:1F:03:00:31:C5:73:C0:01:40:00:90:00:0C {
           type = 9002;
           driver = "openpgp";
           # name = "Nitrokey Pro";
           md_read_only = false;
           md_supports_X509_enrollment = true;
   }
   # Nitrokey HSM 2, SmartCard-HSM
   card_atr 3b:de:18:ff:81:91:fe:1f:c3:80:31:81:54:48:53:4d:31:73:80:21:40:81:07:1c {
           type = 26000;
           driver = "sc-hsm";
           # name = "Nitrokey HSM 2";
           md_read_only = false;
           md_supports_X509_enrollment = true;
   }
   # Nitrokey HSM, SmartCard-HSM
   card_atr 3B:FE:18:00:00:81:31:FE:45:80:31:81:54:48:53:4D:31:73:80:21:40:81:07:FA {
           type = 26000;
           driver = "sc-hsm";
           # name = "Nitrokey HSM";
           md_read_only = false;
           md_supports_X509_enrollment = true;
   }
   

3. Aprite un terminale di comando e digitate «regedit». Usate regedit per importare ` questo file <https://www.nitrokey.com/sites/default/files/nk-hsm.reg>`_.

4. Ora potete iscrivere Nitrokeys per i vostri utenti gestiti in Microsoft Active Directory. Potete usare Microsoft PKI, gpgsm, o Smart Policy. I seguenti passi descrivono l’uso di Smart Policy.

5. Scaricate e installate Smart Policy.

6. Selezionare «Leggere una smart card».

   

7. Seleziona il certificato, la mappatura e l’utente.

   

8. Verificare lo stato del dispositivo tramite CRL.

   

9. Scegliete un oggetto dei criteri di gruppo (GPO).

   

10. Confermare l’applicazione della mappatura.

D’ora in poi, quando ti connetti al tuo computer Windows devi collegare la Nitrokey e inserire il tuo PIN.