NoMoreFood/putty-cac

Feature Request: Option to disable Pin Caching for user

PalmEmanuel opened this issue ยท 7 comments

Feature Request

In a corporate environment we have the need to disallow the feature "Force PIN Caching" for users who utilize PuTTY CAC. We would like the ability to block users from being able to use the feature completely because of security reasons, as a system-wide setting for machines that install PuTTY CAC.

Feature we would like to hide / disable:

image

Suggested Implementation

PuTTY CAC could look for a specific registry key in the machine hive (to ensure non-admin users cannot change it), for example HKEY:/LocalMachine/Software/SimonTatham/PuTTY DisablePinCaching DWORD 1.

This would effectively make PuTTY CAC ignore the following registry value in the user registry hive and treat it as being 0:

image

If it's more convenient for you, we would be happy to submit a PR for it.

@PalmEmanuel Could you try this build and let me know if you it works well for you? It should allow you to override any of the DWORD values using the same-named version under HKLM (with whatever value you wanted it forced to).

puttycac-0.80-enforced-test.zip

It works well, thank you so much for such a quick implementation! ๐Ÿ™๐ŸŒŸ

Great! I do see one change I need to make so please do not distribute this until we do an official release.

Understood, thanks again! ๐Ÿ‘

I'll try it out and get back to you, thanks!

Yep it works, thanks again! Looking forward to the release.