Active Directory智能卡授权

Question

Im looking how to perform smart card authentication against AD from C# client application. I need to make logon into application using the smart card. Could somebody give me clue where to find API for this? Thanks.

Answer 1

you can call logonuser with serialized credential:

• the hash of the certificate will become the username
• the PIN of the smart card will become the password

But to get the certificate, you will have to enumerate the cryptoapi containter then access the certificate using CryptGetKeyParam(KP_CERTIFICATE)