Highlighted
Valued Contributor.. Valued Contributor..
Valued Contributor..
119 views

Anyone has expirience with testing a web app that uses a Personal Identity Validaton (PIV) card?

I am currently trying to record a web script on a webmail application. This site requieres a PIV card for authentication. Once inserted into the smart card slot, the site asks the user to pick a security certificate from a list and also enters a pin. Once selected, the user is able to get to the main page of teh webmail application. In addition to the PIV authentication, this secure application requieres a special certificate that has to be installed on all browsers that wil be accessing the application. It has to be stored in the "Trusted Root Certificate Store".

 

Manually this works without a hitch but when using Vugen, this gets complicated. Vugen asks the user to pick a cert from a list. Once the correct cert is selected, Vugen asks for teh pin. This happens a few times. And if succesfull, teh user is able to access the main webmail page. When trying to replay this script, Vugen asks for input from teh user during playback. So I manually have to input the pin in order for the replay to continue.

 

Is there a specific way to record such an application? Or is disabling the PIV authentication the only way around this?

0 Likes
2 Replies
Highlighted
Outstanding Contributor.. Outstanding Contributor..
Outstanding Contributor..

Re: Anyone has expirience with testing a web app that uses a Personal Identity Validaton (PIV) card?

Hi,

You have mentioned a special certificate. Did you add it to Recording Option/ Port Mapping before record the script?
The certificate must be in PEM format.

Regards,

Chau

Regards,

Chau Nguyen | SW Technical Support Consultant.
LoadRunner and Performance Center


If you find that this or any other post resolves your issue, please be sure to mark it as an accepted solution.
If you are satisfied with anyone’s response please remember to give them a KUDOS by clicking on the STAR at the bottom left of the post and show your appreciation.
0 Likes
Highlighted
Valued Contributor.. Valued Contributor..
Valued Contributor..

Re: Anyone has expirience with testing a web app that uses a Personal Identity Validaton (PIV) card?

Thanks for the suggestion. I did indeed add the cert in the correct format to the port mapping in the recording options. That did not work.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.