Support Request: Selecting Smart Card Certificates In Chrome

Description

Hello,

Currently, we are trying to set up our sitekiosk to visit certain websites that require a smart card to log in. When using IE skins, we are prompted when trying to log in to select which certificate on the card we would like to use. This is what we need. However, when using this with the chrome skin, it just defaults to one of the certificates on the card and allows us to put in the pin. We need to be able to select the correct certificate though as this may change from site to site. Now before anybody says it's not possible with chrome, we did get this working at one point. This was however 6 months ago on a demo license and then we had to wait for management to approve the software so now we are starting from scratch again. All of our config files and setting are gone as we are using new devices.

Could somebody please assist us with getting the prompt to work again when trying to select a certificate on a smart card through chrome? I have been beating my head against a wall for the last 4 days. Thank you.

Answer: (9)

Re: Selecting Smart Card Certificates In Chrome 5/20/2022 12:02 PM
Hello,

Did you have contact with someone from Provisio about this 6 months ago?

Otherwise:
Since SiteKiosk does not have a special setting for this, I can only assume that it might be due to user-dependent Windows settings.

If it works in the Google Chrome browser without any additional plugin or the like, try it in SiteKiosk first in "Start Once" mode in the Windows user account where it worked with the Google Chrome browser.

If it works in "Start Once" mode, check it again in the Google Chrome browser under the SiteKiosk user account used in "Auto Start" mode.
Here is the information on how to get access.
https://www.sitekiosk.com/eu/web/CustomerSupportCenter/ArticleDetails.aspx?ArticleID=5826

If it doesn't work in "Start Once" mode, it's best to check it once in the Chromium CEF test browser.
The actual SiteKiosk version 9.9.6181 uses Chromium 101.0.4951.34 (Windows 32 bit) for the Chrome Browser Skin.
Here you can download the corresponding Chromium test application (unzip 2x and run the cefclient.exe in the "Release" folder),
https://cef-builds.spotifycdn.com/cef_binary_101.0.12%2Bg2123032%2Bchromium-101.0.4951.34_windows32_beta_client.tar.bz2

If it already does not work in the Google Chrome browser and / or the Chromium CEF browser, it cannot not work out of the box in SiteKiosk either.

Regards,
Michael Olbrich
Re: Selecting Smart Card Certificates In Chrome 5/20/2022 2:09 PM
Hello and thank you for the response.

I did not have contact with Provisio about this 6 months ago. We managed to figure it out but for the life of me we cannot get it going again. I am testing on the same device we got it working on last time, but I have since uninstalled SiteKiosk and re-installed it so I lost all previous configuration files.

On the machine by itself (SurfacePro) I can open up chrome and navigate to a website and I am prompted to select which certificate I need. Once I start SiteKiosk under the Start Once mode and use the chrome skin, I am not prompted to select my certificate but only the option to put in my pin number.

I will try the test application but I hope with this added information maybe you can help out some more.
Re: Selecting Smart Card Certificates In Chrome 5/20/2022 3:39 PM
Hello,

Are there any additional settings or plugins or launch parameters (command line switches) that are required for use in the Google Chrome browser?

If not and it also works in CEF Test Browser you may check again after updating SiteKiosk to the most current version that is using the same Chromium CEF version 101.0.4951.34 (the old SiteKiosk version 9.9.5895 did use Chromium CEF 91.0.4472.101):
https://www.sitekiosk.com/sitekiosk-windows-version-history/

Furthermore, you may check the SiteKiosk log (…\SiteKiosk\Logfiles).
If SiteKiosk blocks anything you will find corresponding log entries.

If you need to debug the web page in SiteKiosk please see here:
https://devblog.provisio.com/post/2017/09/15/Debugging-Webpages-in-the-SiteKiosk-Windows-Chrome-Browser.aspx

Also note: with the default deinstallation of SiteKiosk the configuration files will not be deleted.
You may check if the previous config file (*.skcfg) is still stored on the computer (the default folder for SiteKiosk configurations is "C:\Program Files(x86)\SiteKiosk\Config".

Regards,
Michael Olbrich
Re: Selecting Smart Card Certificates In Chrome 5/23/2022 2:51 PM
Hello,

Sorry for the delayed response, I was unable to work on this over the weekend. I cannot get the option to prompt for my certificates through the CEF Test Browser. I did try to upgrade to version 101.0.4951.34 and that did not help also.

Thank you for pointing me to the config files. I noticed I did not lose them. I did load up the ones that were still on my tablet but unfortunately, none of them worked with prompting the certificates. I noticed that the IE browser skin does prompt but however, but it does not load all of our webpages properly.

Is there a way to run the IE browser skin through SiteCaster? From what it seems only the Chrome skin is used for SiteCaster. Is there a location to the IE exe that SiteKiosk uses so that I can just create buttons that open up different web pages in different browsers. For example, our main webpage does not format well with IE, it does work fine with Chrome. We do not need the certificate option to show there so I would like if a person could open up our webpage in chrome and the webpage that needs the certificates to open up in IE. Note that I would create a new button to open up the new page in IE, I would not be trying to open a new window within chrome. I hope this is all possible through SiteCaster as this would be the easiest option for us. Any suggestions?
Re: Selecting Smart Card Certificates In Chrome 5/23/2022 4:56 PM
Hello,

If it doesn't work in Chromium CEF, it cannot work in SiteKiosk with the Chrome browser either (at least not out of the box).

Since it seems to work in Google Chrome browser, either this feature was not implemented in Chromium CEF, or you made a special setting in Google Chrome to make it work?
What exactly is used on the website to select the certificate (maybe a developer of us with more details can give more information)?

The IE skins (generally legacy and only included for compatibility reasons) are using the IE Webbrowser Control provided by Microsoft under Windows.
https://docs.microsoft.com/en-us/dotnet/desktop/winforms/controls/webbrowser-control-overview?view=netframeworkdesktop-4.8
https://www.sitekiosk.com/web/CustomerSupportCenter/ArticleDetails.aspx?ArticleID=26224

The Chrome browser skin and SiteCaster use a Chromium CEF engine customized for and installed with SiteKiosk.
https://bitbucket.org/chromiumembedded/cef/src/master/README.md

Launching other browsers is blocked by SiteKiosk for security reasons and is not supported by us.

"Mixing" IE Skin and SiteCaster would only be possible by either using 2 monitors (main screen > Metro IE Skin and second screen > SiteCaster) or by using the "Split Sceen" feature at >Start Page & Browser.
Further Information you can find in the SiteKiosk help:
Second Monitor: https://www.sitekiosk.com/helpconsole/SiteKiosk%20Help/en-US/default.htm?secondmonitor.htm
Split Screen: https://www.sitekiosk.com/helpconsole/SiteKiosk%20Help/en-US/default.htm?digital_signage.htm

But note that both contents run separately from each other and you cannot display e.g. SiteCaster content in the IE engine.
And I don't think that the certificate information is passed; just like it wouldn’t work between IE11 and Chrome.

Regards,
Michael Olbrich
Pages (2): [1] 2 Next »
My Account
Login
Language (Tickets):