Smart Card Authentication via ssh

[siffland]

I am having issues with Smart Card Authentication via SSH. I am getting the following error:

There was an error creating the signature during public-key authentication: Internal Cryptoki (PKCS#11) error in file Pkcs11Private.cpp on line 460: CKR_MECHANISM_INVALIV(0x00000070)

In my identity or certificate file i am using the following line:

pkcs11key::prov=C:\Program Files\ActivIdentity\ActivClient\acpkcs211.dll

and i get a Fingerprint hash.

I am using SecureCRT Version 7.3.4 (x64 build 839), ActivClient x64 (7.0.0.55), connecting to a Red Hat Enterprise Linux 6 server. I am suspecting SecureCRT because i also have Attachmate Reflection X on the same machine and can use it with the Activclient to connect to the server using my smart card.

We need this working to conform to our security guidelines, we have gotten it working with RelectionX, but all of our Administrators like SecureCRT much better (that is why we purchased it).

Thanks,

Sean

[rtb]

Hi Sean,

I am sorry to hear about the problem. This issue is not something that can be resolved in the forums.

Please send an email to support@vandyke.com.

Once we have a resolution via email, I will post it to this thread.

[lhorstman]

I'm having exactly the same issue. Windows 7, SecureCRT 7.3.4, ActivClient version 6.2.0.194, connecting to RHEL 6 with an OpenSSH build version 6.9p1. Same error message as Sean. I'll be emailing support as well.

-Luke

[rtb]

Hi Luke,

Thanks for the post.

As mentioned, when we have a resolution with regards to using ActivClient, we will post here.

For those reading this post, please note that it would be helpful when sending an email if you could let us know if using the ActivClient middleware is an absolute mandate or something that is not necessary.

[rtb]

Hi All,

We have a new build of SecureCRT that has some changes to work better with ActivClient middleware.

If anyone would like to test it, please send an email to support@vandyke.com.

[rtb]

Hi All,

SecureCRT 8.0 has been officially released, and should work with ActivClient middleware.

If you need assistance, please email support@vandyke.com.