Greetings,

I work in IT as a desktop support specialist.  I have a user's laptop here with Windows 8.1 Pro on a domain.  Normally we login with a regular domain password and create the virtual smart card via the command prompt (TPM either automatically initialized through AD or on setup of the new PC).  After this we have a certserv that I can connect to and install a TPMsmartcard certificate.  Usually after that I just log out and/or restart and choose sign-in options and the smart card is present.  

I followed all the normal steps we take, but for some reason the smart card is not in sign-in options.  I thought it could be the certificate, so I went into cert manager and removed all traces of it and then re-installed it but that did not help. I even cleared the TPM after destroying the smart card and then recreated it to no avail.  "Sign-in Options" is not even present under the password field as it normally is, and we are definitely on the domain.  I named the virtual smartcard tpmvsc and it shows up in device manager.  

Has anyone come across an issue like this before?  I have a feeling the certificate is not installing correctly.  The sysadmin/my boss had to edit the GP because at first the certificate install was "Denied by Policy Module."

Forgot to mention we DO use this in conjunction with Bitlocker, and Bitlocker is already setup.

Hi,

As far as I know, this is most probably Certificate problem, only when correct Certificate installed successfully, smart card login option would appears in Logon screen. Please check it carefully.

On the other hand, try to use other PC make a test to make comparison.

I have removed the certificate from cert manager and re-installed it, and it still does not seem to be working.  How would I check if it is the correct cert?

Hi,

About dealing with certificate problem, you can access to the link below for more details:

https://technet.microsoft.com/en-us/library/cc700843.aspx?f=255&MSPPError=-2147217396