Share via


Dialog Box - Smart Card or Other Certificate Properties

Applies To: Windows 7, Windows Server 2008 R2

Use this dialog box to configure settings for Extensible Authentication Protocol (EAP).

Dialog box element Description

Use my smart card

Specifies that the certificate that resides on your smart card is presented to your server for authentication.

Use a certificate on this computer

Specifies that the certificate that resides in the certificate store on your computer is presented to your server for authentication.

Use simple certificate selection

Simplifies certificate selection for the user by grouping certificates with the same subject and selecting the most recently issued certificate in each group. If only one group exists, then the most recent certificate in this group is automatically selected for authentication.

Validate server certificate

Specifies whether to verify that the server certificate presented to your computer has not expired and is still valid. During the certificate authentication process, your computer presents its certificate to the server, and the server presents its certificate to your computer.

Connect to these servers

Specifies the server or servers to which your computer will automatically connect. The server name specified must exactly match the server name on the certificate. You can specify multiple server names, separated with semicolons.

Type the name of the server as it appears in the certificate properties. This could be a short name or a fully qualified domain name (FQDN), for example, server.microsoft.com.

Trusted Root Certification Authorities

Lists the available trusted root certification authorities (CAs). Trusted root CAs have passed through multiple layers of verification and are considered the most secure.

Use a different user name for the connection

Specifies whether to use a different user name when the user name in the smart card or certificate is not the same as the user name in the domain that you are logging on to.

Do not prompt user to authorize new servers or trusted certification authorities

Specifies whether to notify that the server certificate presented to your computer is not trusted. Untrusted certificate authentication attempts will silently fail.