topic TACACS+ and Smart Card login in Network Access Control https://community.cisco.com/t5/network-access-control/tacacs-and-smart-card-login/m-p/2233932#M126302 <P>We are currently using Cisco ACS 5.3 integrated with Active Directory for authentication to our Cisco devices. We are looking to move to smart card logins and trying to find out if this is possible to authenticate to the console/ssh on the router/switch using a smart card.</P> Mon, 11 Mar 2019 03:35:27 GMT solareonx 2019-03-11T03:35:27Z TACACS+ and Smart Card login https://community.cisco.com/t5/network-access-control/tacacs-and-smart-card-login/m-p/2233932#M126302 <P>We are currently using Cisco ACS 5.3 integrated with Active Directory for authentication to our Cisco devices. We are looking to move to smart card logins and trying to find out if this is possible to authenticate to the console/ssh on the router/switch using a smart card.</P> Mon, 11 Mar 2019 03:35:27 GMT https://community.cisco.com/t5/network-access-control/tacacs-and-smart-card-login/m-p/2233932#M126302 solareonx 2019-03-11T03:35:27Z TACACS+ and Smart Card login https://community.cisco.com/t5/network-access-control/tacacs-and-smart-card-login/m-p/2233933#M126303 <HTML><HEAD></HEAD><BODY><P>As per my knowledge you cannot do that, it is not possible to authenticate an user logging into router console using a smart card. Router doesnt support that token based access control.</P></BODY></HTML> Thu, 27 Jun 2013 06:15:41 GMT https://community.cisco.com/t5/network-access-control/tacacs-and-smart-card-login/m-p/2233933#M126303 Saurav Lodh 2013-06-27T06:15:41Z TACACS+ and Smart Card login https://community.cisco.com/t5/network-access-control/tacacs-and-smart-card-login/m-p/2233934#M126304 <HTML><HEAD></HEAD><BODY><P>Direct Smart card authentication is not supported for vty / console session on IOS. However, via TACACS to a AAA server (e.g. Cisco ACS) you can turn it to use a two factor-based external authentication store. Even if the Smart card get the PKI cert of some kind to the client PC and then to the terminal emulator like Putty or SecureCRT, AAA with Tacacs + would not be possible as Tacacs is not capable for encapsulating any kind of PKI.</P><P></P><P></P><P>Jatin Katyal <BR /> - Do rate helpful posts -</P></BODY></HTML> Thu, 27 Jun 2013 12:40:05 GMT https://community.cisco.com/t5/network-access-control/tacacs-and-smart-card-login/m-p/2233934#M126304 Jatin Katyal 2013-06-27T12:40:05Z