2 ms·

Is it possible to use a Dell contact smart card reader for web 2FA? Preferably in some way that it can be cloned if they lose their card. We’ve got contact rea

Is it possible to use a Dell contact smart card reader for web 2FA? Preferably in some way that it can be cloned if they lose their card. We’ve got contact readers in all the laptops, and our door systems can read them too, but not sure how to deploy them for websites and such. You want to implement security for even the least technical role (ie reception), but you also don’t want to give everyone a keychain full of dongles or install half a dozen computer plugins.

g_p 4y ago
If you deploy and maintain your own fleet of cards then you could do this. There's an open source FIDO2 applet implementation at https://github.com/martinpaljak/FIDO2 https://github.com/martinpaljak/FIDO2 You could also use PIV/PKCS11 client certificates if it's for internal systems you run - there is reasonably good support for using client certificates in popular browsers from a smartcard, as this is used for DOD CACs.