How do I fix smart card logon error - No valid certificates found ?
I have written a smart card minidriver (for a read-only card). Now I am trying Windows 7 smart card logon, but there is "No valid certificates found" error on logon screen, when I insert the card. I have two certificates in the smart card, one for encryption, another for digital signature and windows logon. Encryption certificate: Key Usage: Key Encipherment Signature and Logon certificate: Key Usage: Digital Signature, Non-Repudiation EKU : Client Authentication, Secure Email, Smart Card Logon I set two cmapfile records for these certificates: cmap[0].wszGuid = L"encr0@ug.net"; cmap[0].bFlags = CONTAINER_MAP_VALID_CONTAINER; cmap[0].bReserved = 0; cmap[0].wSigKeySizeBits = 0; cmap[0].wKeyExchangeKeySizeBits = 2048; cmap[1].wszGuid = L"sign0@ug.net"; cmap[1].bFlags = CONTAINER_MAP_VALID_CONTAINER|CONTAINER_MAP_DEFAULT_CONTAINER; cmap[1].bReserved = 0; cmap[1].wSigKeySizeBits = 2048; cmap[1].wKeyExchangeKeySizeBits = 0; Function calls in minidriver logs are: when card inserted first time: CardReadFile() [cmapfile] CardGetContainerProperty() [CCP_PIN_IDENTIFIER] for ContainerIndex: [1] CardGetProperty() [CP_CARD_PIN_INFO][1] CardReadFile() [cmapfile] CardGetContainerInfo() ContainerIndex...[1] CardReadFile() [cmapfile] CardReadFile() [ksc00] CardGetProperty() [CP_CARD_CAPABILITIES] CardGetProperty()[CP_CARD_GUID] CardReadFile() [cmapfile] CardGetProperty() [CP_CARD_PIN_INFO][1] CardReadFile() [cmapfile] CardGetContainerInfo() ContainerIndex...[1] CardReadFile() [cmapfile] CardGetContainerInfo() ContainerIndex...[0] CardGetContainerInfo() ContainerIndex...[1] CardGetProperty() [CP_CARD_GUID] CardReadFile() [cmapfile] CardGetContainerProperty() [CCP_PIN_IDENTIFIER] for ContainerIndex: [0] CardGetProperty() [CP_CARD_PIN_INFO][1] CardReadFile() [cmapfile] CardGetContainerInfo() ContainerIndex...[0] CardReadFile() [cmapfile] CardReadFile() [cmapfile] CardGetContainerInfo() ContainerIndex...[0] CardReadFile() [cmapfile] CardReadFile()|pszFileName = [kxc00] CardGetProperty() [CP_CARD_CAPABILITIES] CardGetProperty()[CP_CARD_GUID] CardReadFile() [cmapfile] CardGetContainerProperty() [CCP_PIN_IDENTIFIER] for ContainerIndex: [1] CardGetProperty() [CP_CARD_PIN_INFO][1] CardReadFile() [cmapfile] CardGetContainerInfo() ContainerIndex...[1] CardReadFile() [cmapfile] CardGetContainerInfo() ContainerIndex...[1] CardReadFile() [cmapfile] CardReadFile() [ksc01] --- File not found CardReadFile() [cmapfile] CardDeleteContext() CardAcquireContext() CardGetProperty() [CP_CARD_GUID] CardReadFile() [cmapfile] CardGetProperty() [CP_CARD_PIN_INFO][1] CardReadFile() [cmapfile] CardGetContainerInfo() ContainerIndex...[1] CardReadFile() [msroots] CardGetProperty()...[CP_CARD_CAPABILITIES] CardDeleteContext() when smart card logon occurs: CardAcquireContext() CardGetProperty() [CP_CARD_GUID] CardReadFile() [cardcf] CardGetProperty() [CP_CARD_SUPPORTS_WIN_X509_ENROLLMENT] CardReadFile() [cmapfile] CardGetContainerProperty() [CCP_PIN_IDENTIFIER] for ContainerIndex: [1] CardGetProperty() [CP_CARD_PIN_INFO][1] CardReadFile() [cmapfile] CardGetContainerInfo() ContainerIndex...[1] CardReadFile() [cmapfile] CardReadFile() [ksc00] CardGetCapabilities...[CP_CARD_CAPABILITIES] CardReadFile() [cmapfile] CardDeleteContext() CardAcquireContext() CardGetProperty() [CP_CARD_GUID] CardReadFile() [cardcf] CardGetProperty() [CP_CARD_SUPPORTS_WIN_X509_ENROLLMENT] CardReadFile() [cmapfile] CardGetContainerProperty() [CCP_PIN_IDENTIFIER] for ContainerIndex: [1] CardGetProperty() [CP_CARD_PIN_INFO][1] CardReadFile() [cmapfile] CardGetContainerInfo() ContainerIndex...[1] CardReadFile()|pszFileName = [cmapfile] CardReadFile()|pszFileName = [ksc00] CardGetProperty() [CP_CARD_CAPABILITIES] CardReadFile() [cmapfile] CardDeleteContext() Why smart card logon doesn't continue? Is my certificate not suitable for logon, or did I write incorrect cmapfile, or anything else? Thanks a lot.
April 6th, 2011 9:21am

Hi, This forum focuses on Windows 7, and it seems like your question is related to development, so I will move this thread to the more appropriate forum. Next time, If you have questions which are related to development, please post at http://social.msdn.microsoft.com/Forums/en/categories/ for help.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 10th, 2011 11:12pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics