search

nsacyber / Windows-Secure-Host-Baseline

Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber
Other
1.56k stars 286 forks source link

Issue with SCR3310v2 reader #7

Closed johnlinton closed 7 years ago

johnlinton commented 7 years ago

I am trying to get the SHB to work in my enclave.

I have a dell OptiPlex 7040 which is apparently supported according to the IASE links to Dell. Everything works (including the 7040 drivers) except for the CAC reader. No matter what I try, I cannot get SHB win 10 to recognize the reader. Upon bootup, Activeclient complains that it can't find a CAC reader. Device manager gives me an ! mark for "SCR3310 USB Smart Card Reader". I have tried manually installing the driver from MilitaryCAC, and that doesn't help. Tried deleting the driver unplugging and plugging it back in to let windows install the driver. Installing other drivers doesn't help as it says that the existing driver is the "best" driver.

We have no problem with our existing Windows 7 machines with these readers. I even tried a working reader from another machine to rule out a physical defect. It appears to be an issue with WIN 10 SHB and the reader.

Support would be appreciated!

gnesto commented 7 years ago

Try using the Microsoft driver. Change in device manager by right clicking on the object > “Update Driver” > “Browse my computer” > “Let me choose...” > “Microsoft smart card driver”.

johnlinton commented 7 years ago

Works like a charm!!! Thanks for the awesomely quick response!!

From: gnesto [mailto:notifications@github.com] Sent: Friday, November 25, 2016 12:51 PM To: iadgov/Secure-Host-Baseline Secure-Host-Baseline@noreply.github.com Cc: johnlinton Author author@noreply.github.com Subject: Re: [iadgov/Secure-Host-Baseline] Issue with SCR3310v2 reader (#7)

Try using the Microsoft driver. Change in device manager by right clicking on the object > “Update Driver” > “Browse my computer” > “Let me choose...” > “Microsoft smart card driver”.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/iadgov/Secure-Host-Baseline/issues/7#issuecomment-263004571 , or mute the thread https://github.com/notifications/unsubscribe-auth/AWpPKd2Zy4GVyv1SWvskRSsQTwZh2CImks5rByAXgaJpZM4K8obg . https://github.com/notifications/beacon/AWpPKWcf3UZKagjK9eQWbBbKgCNnvSdKks5rByAXgaJpZM4K8obg.gif

johnlinton commented 7 years ago

BTW, is this section only for bugs? Where can I go for questions? For some reason the IASE site lists assistance by Military Branch. When I called my branch at the number provided by IASE, the support desk didn’t know why I was not using the AF Desktop instead of the DoD SHB and told me they couldn’t help me with it.

For instance, how do I inject registry changes (for example) changing netbanner status or how do I configure the deployment to use the Microsoft smart card driver. I would use the virtual machine, but every time I try to run it after the first time, it gives me the error 0xc000000f, in recovery mode. Must I implement my changes before the initial session ends?

Thanks. Happy Holiday!

iadgovuser1 commented 7 years ago

@johnlinton

Yep, using the built-in smart card driver is the workaround.

You can also post questions to the SHB forums at https://software.forge.mil/sf/projects/win10shb?uri=/sf/projects/win10shb as long as you have a CAC. The types of implementation specific questions you have are best posed in the community SHB forum.