Graphical identification and authentication: Difference between revisions

Revision as of 14:27, 4 December 2014

Revision as of 03:51, 25 March 2017

Line 1:

{{unreferencedrefimprove|date=AprilMarch 20092017}}

The '''graphical identification and authentication''' ('''GINA''') is a component of [[Windows 2000]], [[Windows XP]] and [[Windows Server 2003]]<ref name=":0">{{Cite web|url = http://technet.microsoft.com/en-us/library/dn169014%28v=ws.10%29.aspx|title = Credentials Management in Windows Authentication|date = 11 April 2013|accessdate = |website = [[Microsoft TechNet|TechNet]]|publisher = [[Microsoft]]|last = |first = }}</ref> that provides secure authentication and interactive [[Logging (computer security)|logon]] services. GINA is a replaceable [[dynamically linked library]] that is loaded early in the boot process in the context of [[Winlogon]] when the machine is started. It is responsible for handling the [[secure attention key|secure attention sequence]], typically [[Control-Alt-Delete]], and interacting with the user when this sequence is received. GINA is also responsible for starting initial processes for a user (such as the [[Windows Shell]]) when they first log on.<ref name=":1">{{Cite web|url = http://msdn.microsoft.com/en-us/library/aa380543.aspx|title = Winlogon and GINA|date = |accessdate = 4 December 2014|website = [[MSDN]]|publisher = [[Microsoft]]|last = |first = }}</ref> GINA is discontinued in [[Windows Vista]].<ref name=":1" />

Line 11:

Winlogon can be configured to use a different GINA, providing for non-standard authentication methods such as [[smart card]] readers or identification based on [[biometrics]], or to provide an alternate visual interface to the default GINA. Developers who implement a replacement GINA are required to provide implementations for a set of [[Application programming interface|API]] calls which cover functionality such as displaying a "workstation locked" dialog, processing the secure attention sequence in various user states, responding to queries as to whether or not locking the workstation is an allowed action, supporting the collection of user credentials on [[Terminal Services]]-based connections, and interacting with a [[screensaver]].

A custom GINA could be made entirely from scratch, or just be the original GINA with modifications. A custom GINA can be specified by placing a string named GinaDLL in the [[Windows registry | registry]] ___location <code>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon</code>. The Winlogon component is solely responsible for calling these APIs in the GINA library.

When the Winlogon process starts, it compares its version number to that which is supported by the loaded GINA library. If the GINA library is of a higher version than Winlogon, Windows will not boot. This is done because a GINA library written for a given version of Winlogon will expect a certain set of API calls to be provided by Winlogon.

Line 27:

== References ==

{{Reflist|1}}

==External links==

*[http://msdn.microsoft.com/en-us/library/aa380543.aspx Winlogon and GINA], developer information on how the login components interact