Pre-Requisites:
- To complete these steps, the end user will need to have their c- account already created by an IT admin and be in the correct initialization state.
- The end user of the c- account and smart card should be the one performing these steps.
- Yubikeys get 10 attempts at logging in before it bricks (becomes locked out). Afterwards it can be reset by contacting ITSCIS@syr.edu
Steps to setup or renew a Smart Card/YubiKey @ Syracuse University
- Use RDP to connect to the server "core-scmgmt-01.ad.syr.edu"
- When prompted for Logon, use your smart card to logon or if you are setting up a new or expired smart card use the username: c-netid (example: c-testuser) and the password provided in the email you received
- If the password above does not work, then the c- account might not have been staged correctly for the completion of these steps. Contact the IT group that provided the smart card.
- If the password above does not work, then the c- account might not have been staged correctly for the completion of these steps. Contact the IT group that provided the smart card.
- On the desktop of the server find the "Setup Smartcard" icon and double click on it.
- At this point, if a virtual smartcard is what is being made, remove any physical cards.
Note: The rest of this documentation is on physical card setup, but virtual card setup is very similiar. - The process is now underway and can take a few minutes.
After, a new window will appear. Press "More Choices". - Select the YubiKey option from the list and press "OK".
- Enter the default PIN of the card. For the YubiKey's provided by ITS, the default is: 123456
- The user may be prompted again for a PIN, 123456, for the root certificate to be added so the yubikey is more versatile.
- After completion, the user account that was used will receive an email. In the email is a calendar appointment to renew the card in 2 years before it expires.
- Once completed the user will not be able to log into scmgmt directly with the username and password like what was done in step 2. They will need to use the smartcard and pin. (The smartcard should show up under "More Choices" when using RDP)
- Remove and Reinsert the Yubikey in the usb port before trying to use it.
Changing the PIN on the smartcard.
If the smart card is still using the default PIN of 123456 then the PIN should be changed. Follow the instructions at the link below to complete the change.