pkcs#11 - 如何使用 C# 通过智能卡远程登录 Windows 10？

Question

我已经设置了事件目录以启用智能卡登录，并且可以通过登录屏幕通过 PIN 登录到 Windows。

我正在寻找使用新 session 登录或远程解锁事件 session 的方法。我找到了 http://www.pkcs11interop.net/看起来真的很酷的工具。所以我花了几次阅读文档来找到解决方案。我实现了可以远程通信的服务，我也可以初始化库并使用登录/注销创建 session ，但是找不到如何登录到 Windows 或解锁事件 session 的方法。有谁知道我如何实现这种方法？

我需要通过 C# 代码执行此操作。

Answer 1

我从未尝试这样做，但我会向您指出 MSDN 上的文档:

Smart Card and Remote Desktop Services

具体来说，

Remote Desktop redirection Notes about the redirection model:

This scenario is a remote sign-in session on a computer with Remote Desktop Services. In the remote session (labeled as "Client session"), the user runs net use /smartcard.

Arrows represent the flow of the PIN after the user types the PIN at the command prompt until it reaches the user's smart card in a smart card reader that is connected to the Remote Desktop Connection (RDC) client computer.

The authentication is performed by the LSA in session 0.

The CryptoAPI processing is performed in the LSA (Lsass.exe). This is possible because RDP redirector (rdpdr.sys) allows per-session, rather than per-process, context.

The WinScard and SCRedir components, which were separate modules in operating systems earlier than Windows Vista, are now included in one module. The ScHelper library is a CryptoAPI wrapper that is specific to the Kerberos protocol.

The redirection decision is made on a per smart card context basis, based on the session of the thread that performs the SCardEstablishContext call. Changes to WinSCard.dll implementation were made in Windows Vista to improve smart card redirection.