title: Website PKSC #11 smart card authentication and SSL client certificates
body: <p>We are creating a three-factor authentication for a website due to a legal requirements in one Scandinavian country. The customer is using NetID branded browser plug-ins to do a PKCS #11 certificate authentication in the browser. The smartcards are supplied centrally by a partner on the customer.</p>
  
  <p>This subject does not have much on-line resources or tutorials available. Would someone have any pointers to example implementations or tutorials how to do PKCS11 authentication in a web browser?</p>
  
  <p>EDIT: Found about SSL client certificates</p>
  
  <ul>
  <li><p>Looks like the authentication method is SSL Client Certificate</p></li>
  <li><p>How do we manage relationship between users and their smartcards? </p></li>
  <li><p>Do users deliver us their public keys and we authenticate against them?</p></li>
  <li><p>Do we need to sign / provision each user individually using our own certicate?</p></li>
  <li><p>Do all user smartcards contain a "generic" key which we test against a provider certificate?</p></li>
  </ul>
  
  <p><a href="http://www.garex.net/apache/" rel="noreferrer">http://www.garex.net/apache/</a></p>
  
  <p><a href="http://www.impetus.us/~rjmooney/projects/misc/clientcertauth.html" rel="noreferrer">http://www.impetus.us/~rjmooney/projects/misc/clientcertauth.html</a> </p>
  
  <p><a href="https://en.wikipedia.org/wiki/PKCS11" rel="noreferrer">https://en.wikipedia.org/wiki/PKCS11</a></p>
  
  <p><a href="https://service.secmaker.com/examples/plugin.aspx" rel="noreferrer">https://service.secmaker.com/examples/plugin.aspx</a> </p>