Company Christmas Holidays
North American Headquarters in Miami, USA: Dec 25, 2015, Jan 1st 2016
European Headquarters in Muenster, Germany: Dec 21, 2015 until Jan 03rd 2016
Limited support is available during this period.
We at PROVISIO wish you Merry Christmas and a Happy New Year!

 

Support Request: Smart card

Description

Dear support,

I am an IT specialist from Estonia.

I am currently preparing sitekiosk Windows 10 machines for our clients for internet bank connection terminal in our offices

In our country there is a smartcard (SC) called "ID card" in use widely. all of our citizens use it and it is one of authentication solutions that we are using to log in to our internet bank.

At the moment I am unable to prepare the machine with this authentication method because sitekiosk refuses to show the authentication window and fails to load page that should be opened after authentication with SC with error 0x7FF3FFF8.

In site kiosk I could not find the way to configure smartcard device availability or windows security confirmation windows (two screenshots ID1 and ID2 added to zip file describing how SC authentication is being used normally)

Could You please tell me how should I configure sitekiosk SW to make SC work? We did use SC with previous sitekiosk version (8) on windows 7 machines.

Answer: (5)

Re: Smart card 9/20/2019 12:48 PM
Hello,

There is no special setting or support for this ID card in SiteKiosk but the message error 0x7FF3FFF8 just means that the requested site (web page) could not be loaded.
Also see log:

20 03ec 2019-09-20 13:03:47 +0300 [SiteKiosk] Navigation: https://id.tbb.ee/cgi/tbb.ib/
20 03ec 2019-09-20 13:03:47 +0300 [SiteKiosk] Navigation: file:///C:/Program%20Files%20(x86)/SiteKiosk/Skins/Public/Default/naverror.htm#-2146697208;https://id.tbb.ee/cgi/tbb.ib/


As you configured the Metro IE Skin SiteKiosk just uses the IE Webbrowser Control of the installed Internet Explorer (like SiteKiosk 8.x did).
So first you should check that it works in Internet Explorer on that system (without any warning dialogs or special plugins).

Then check if it works in SiteKiosk when you start in “Run once” mode (in the user account where it must work in IE before)?

If that works also check in the IE while logged in as SiteKiosk user (used in “Auto Start” mode):
https://www.provisio.com/en-GB/CustomerSupportCenter/ArticleDetails.aspx?ArticleID=5826

Or you check what you configured on the Windows 7 systems with SiteKiosk 8.x to make it work with SiteKiosk.

General notes in regards to the config you attached:
1. As you added the IE and SiteKiosk as external application to the SiteKiosk configuration please note that SiteKiosk cannot be started a second time and external browser applications are blocked in general when SiteKiosk is executed.
2. The path https://C:\Users\Administrator\Desktop\URLS.txt you added to “Address List” in the “Surfing Area settings cannot work as local files need to be accessed with the file protocol and also note that other Windows users than the “Administrator” cannot access “C:\Users\Administrator\Desktop”.

Regards,
Michael Olbrich
Re: Smart card 9/20/2019 2:03 PM
Dear Michael,

Thank You for quick reply.


Just to be clear:

https://id.tbb.ee/cgi/tbb.ib/ address is also added to allowed url list as well as https://*.tbb.ee

Does the address in text file provoke conflict with the url list if the path is only available for administrator users?

Speaking of requested page https://id.tbb.ee/cgi/tbb.ib/ it does open within IE explorer and Google Chrome under administrator account and also under restricted sitekiosk user after authentication windows appear while applications allowed to run via System Security manager

Our Estonian ID Card solution does use IE Token Signing Plugin, but not for authentication, only for signing which might be the next question in the future.

Unfortunately, for some reason I cannot correctly start sitekiosk once under administrator account. Sitekiosk just closes the window leaving desktop picture with gray safe door. image

Log file would not give any information regarding reason of this behaviour:

20 03e9 2019-09-20 14:42:02 +0300 [SiteKiosk] started
30 0000 2019-09-20 14:42:02 +0300 [SiteKiosk] Warning: Surf area rules: not all rules can be loaded.
10 03f0 2019-09-20 14:42:03 +0300 [SiteKiosk] Printer Monitoring: VIRUX_PRN (HP LaserJet Pro MFP M521dn): k_Printer::k_Printer: service init failed
30 03f0 2019-09-20 14:42:03 +0300 [SiteKiosk] Printer Monitoring: VIRUX_PRN (HP LaserJet Pro MFP M521dn): k_Printer::Pause failed
20 03f0 2019-09-20 14:42:03 +0300 [SiteKiosk] Printer Monitoring: VIRUX_PRN (HP LaserJet Pro MFP M521dn)[User]: added, Status 0x0, Attributes 0x240, Priority 1
40 03f0 2019-09-20 14:42:03 +0300 [SiteKiosk] Printer Monitoring: WaitForMultipleObjects failed with error code 0x6
20 0000 2019-09-20 14:42:04 +0300 [SiteKiosk] Notification: Beginning deletion of temporary internet files.
20 03ec 2019-09-20 14:42:04 +0300 [SiteKiosk] Navigation: https://www.tbb.ee/
20 0000 2019-09-20 14:42:04 +0300 [SiteKiosk] Notification: Deleting of certificate: MAIER,VLADIMIR,38404300319
20 0000 2019-09-20 14:42:04 +0300 [SiteKiosk] Notification: Deleting of certificate: MAIER,VLADIMIR,38404300319
20 0000 2019-09-20 14:42:04 +0300 [SiteKiosk] Notification: [Memory Status] Physical Memory: 3.35 GB (4.48 GB free, 42.8% used); Paging File: 3.75 GB (5.33 GB free, 41.3% used)
20 0000 2019-09-20 14:42:04 +0300 [SiteKiosk] Notification: [Process Status] GDI Objects: 35; USER Objects: 117; Handles: 1217; Process Memory Usage: 92.74 MB
20 0000 2019-09-20 14:42:04 +0300 [SiteKiosk] Notification: 0 temporary internet files successfully deleted. Done.
20 0000 2019-09-20 14:42:04 +0300 [SiteKiosk] Notification: 5 history entries successfully deleted. Done.
20 0000 2019-09-20 14:42:04 +0300 [SiteKiosk] Notification: 0 cookies successfully deleted. Done.
20 0000 2019-09-20 14:42:05 +0300 [SiteKiosk] Notification: SYSTEM INFORMATION - Computer Name: SITEKIOSK-VV7, Computer Guid: 8999e571-a743-4a2b-9251-45c7fde87fef, User Agent Information: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0; SiteKiosk 9.7 Build 5026), Running under restricted SiteKiosk user: false

no further information in the log file

Also, if it might help, the configuration file was originally prepared for Sitekiosk v.8 and exported to new machine.

I could try to make another configuration file from scratch and try to start with new one.

It would be great if You could suggest any other solution.
Re: Smart card 9/20/2019 2:59 PM
Hello,


In case the Surfing Area setting blocks a URL you get a log entry like this:

[SiteKiosk] Notification: According to the surf area rules the navigation to  XYZ was canceled.


This message does not apply to the surfing area settings but is a general access issue:

20 03ec 2019-09-20 13:03:47 +0300 [SiteKiosk] Navigation: https://id.tbb.ee/cgi/tbb.ib/
20 03ec 2019-09-20 13:03:47 +0300 [SiteKiosk] Navigation: file:///C:/Program%20Files%20(x86)/SiteKiosk/Skins/Public/Default/naverror.htm#-2146697208;https://id.tbb.ee/cgi/tbb.ib/

You may also check what happens when deactivating the option “Show SiteKiosk navigation error pages” at “-->Start Page & Browser-->Advanced”.
Furthermore you may uncheck the box labeled 'Add "SiteKiosk" to user agent header'.


>>>Unfortunately, for some reason I cannot correctly start sitekiosk once under administrator account.<<<
It seems you reactivated the special admin account with the name “Administrator” (usually deactivated by Microsoft) and use that account for testing in “Start once”. Please create another local admin account and check again (first in IE and then in “Start once” in SiteKiosk).


Common plug-ins like Adobe Flash, Adobe PDF or Oracle Java also work in IE Webbrowser Control but not all plug-ins for IE can be used in IE Webbrowser Control.
But as it works in your SK 8 system it must also work in SK 9 with an IE based Skin (E.g. Metro IE). The rest applies to the system environment and the corresponding IE settings (which are user dependent).


General note:
The IE based skins are using the IE Webbrowser Control of the installed Internet Explorer.
The Chrome Browser Skin uses a Chromium CEF engine installed with SiteKiosk (open source and also source for Google Chrome).
More information here: https://bitbucket.org/chromiumembedded/cef/src/master/README.md
https://en.wikipedia.org/wiki/Chromium_Embedded_Framework


To compare the usage with SiteKiosk you need to check in Internet Explorer (or IE Webbrowser Control) on that system or even with the corresponding Chromium CEF Test application.

SiteKiosk 9.7 uses Chromium 73.0.3683.75 Windows 32 Bit. Here you can find the corresponding Chromium test application for download (unzip 2x and run the cefclient.exe in the "Release" folder) which is currently used in SiteKiosk 9.7.5026 (Chromium 73.0.3683.75 Windows 32 Bit):
http://opensource.spotify.com/cefbuilds/cef_binary_3.3683.1920.g9f41a27_windows32_client.tar.bz2

For testing it in the Internet Explorer Webbrowser Control (outside / without SiteKiosk) you can download a ZIP from our web page and then execute the exe after extracting the files (you do not need to install anything):
Here a PDF with further descriptions and a link to a Webbrowser Control test application:
http://www.provisio.com/Download/Webbrowser%20Control%20Test%20Applikation%20EN.pdf

Regards,
Michael Olbrich
Re: Smart card 9/23/2019 10:51 AM
Hello,

It seams that storing configuration file under administrator`s user folder was causing the problem.
Moving the configuration file to a new local folder on c drive solved the problem.

Thank You for your assistance and have a nice day!
Re: Smart card 9/23/2019 11:01 AM
Thank you very much for your feedback.
Please note that the recommended default folder for the SiteKiosk configuration is “…\SiteKiosk\Config” (C:\Program Files (x86)\SiteKiosk\Config).