I am looking for details on how to secure a windows laptop using smart cards.
The scenario is that we have laptops in vehicles, which remotely connect (via https) to an application server over the internet. Scheduling and payment applications run on the laptop. The operator is often away from the vehicle when performing work at a customer's location.
To use the system, the operator should insert their smart card into the reader on the laptop. This should unlock the laptop. I want the application server to have client-side certificates which somehow are stored (or activated) using the smart card. Thus if the vehicle/laptop get stolen or compromised the thief cannot access the server without the smart card.
Certainly we can deactivate the user account/revoke certificate after we discover the laptop has been stolen, but its the time in between where unauthorized access may be possible.
In an ideal world, I would love wireless (bluetooth?) smart cards, so the operator does not actually have to insert any card, just be close. (like this: Blackberry + RIM Bluetooth-based Smart Card Reader)