Secure user authentication to computing resource via smart card

A method of activating a smart card, comprising:

• sending, to an administration server, identifying information read from a non-activated smart card that has not been previously used by a user to whom the non-activated smart card has been issued;
• sending, to the administration server, manual authentication information input by the user;
• generating a public key using the non-activated smart card;
• sending the public key to the administration server;
• and
• receiving a digital certificate that is generated using the public key, wherein the non-activated smart card is activated upon receipt of the digital certificate.

A method of activating a smart card then using an activated smart card, comprising:

• on first use of a non-activated smart card by a user to whom the non-activated smart card has been issued:
• receiving identifying information for the non-activated smart card;
• receiving manual identification information for the user;
• authenticating the user and the non-activated smart card using the manual authentication information and the identifying information;
• obtaining a public key from the non-activated smart card;
• and
• sending a digital certificate generated using the public key from a certificate authority to the non-activated smart card, wherein the non-activated smart card is activated upon receiving the digital certificate;
• and
• on a subsequent use of the smart card:
• receiving a login request that is initiated when the activated smart card is connected to a workstation;
• authenticating the digital certificate against a certificate revocation list to determine that the digital certificate has not been revoked;
• and
• if authenticated, permitting a login to a computer resource.