Right-click the Pageant icon again from the menu bar and select New Session.Warning: You must re-add your certificate every time pageant is started. The Pageant Window will now display the certificate information.Highlight the correct Smart Card certificate and click OK.Note: If multiple certificates exist, you may want to clear out the expired or revoked certificates by following How To – FIXME: PIV Card – Clear certificate store. If you do not see this field, select a different certificate. It should begin with “Smart Card Logon ” this indicates it is the correct certificate. Make sure you choose the correct certificate! Select “Click here to view certificate properties,” click “Details,” scroll half-way, and locate Enhanced Key Usage.Select your Smart Card Logon certificate from the Windows Security window.The Pageant Key List window will appear.Right-click the icon and select View Keys. A window will not open, but the Pageant icon will appear on the menu bar.Open Pageant by clicking the executable.Open Windows Explorer or click Start > Computer.You must now insert the CAPI Key and configure PuTTY-CAC.Pageant will appear in the taskbar on the bottom right of your desktop it will not open a window. Launch pageant from the PuTTY install directory, (eg, C:\Program Files\Putty-CAC).Verify the version of PuTTY that was installed by opening the application and clicking About in the lower left corner.This will enable the Putty-CAC applications to be available from the Start Menu.Īt a minimum, you must install the following packages:
Note that Van Dyke Secure CRT, a commercial product, also supports PIV SSH login for multiple platforms, including Windows and Mac. Putty-CAC, a fork of the Open Source Putty SSH client, resolves this issue. Most Unix-like systems are configured to use the SSH protocol for remote access, but most SSH client applications do not support PIV as required by Federal policy.