Re: SmartCard login despite exclusive mode to reader

From: Eric Perlin [MS] (ericperl_at_online.microsoft.com)
Date: 01/10/05


Date: Mon, 10 Jan 2005 11:43:35 -0800

The behavior that you report (icon appearing, then disappearing when this
"application" starts) indicates that the reader itself isn't available
anymore from winlogon. I don't quite understand what causes this though,
especially since it doesn't match with your testing.
I suggest you enable logging (see
http://support.microsoft.com/default.aspx?scid=kb;en-us;232575 and add SC to
the debug flags).
The debug spew may yield some insights as to what is going on.

-- 
Eric Perlin [MS]
This posting is provided "AS IS" with no warranties, and confers no rights.
---
"Mats Pettersson" <MatsPettersson@discussions.microsoft.com> wrote in
message news:D95270DC-2DD1-41B1-8A01-2281099B2304@microsoft.com...
> The other application connects (according to the vendor) to every
smartcard
> with SCardConnect with the option EXCLUSIVE MODE.
>
> I have written a test code and the low level calls you listed works (only
> tested the tree first). I installed a pt-GINA and made the listed calls
from
> there and they all worked (after the application started).
>
> But I still encounter the same problem that only the default message is
> displayed. Or to be more precise the "Put in a smart card" message is
shown
> for about a second then the security service starts and only the default
> message is displayed.
>
> I have been in contact with the vendor and according to them the only
thing
> they do is connecting to the smartcard in EXCLUSIVE MODE. I have also
removed
> there application/service and then every thing worked fine. I'm therefore
> sure that it is causing the problem.
>
> -        Is there another way to stop Windows from displaying the "Put in
a
>   smartcard" message during logon that they might have implemented? For
> example a registry setting?
> -        Is there a way to activate this functionality again?
>
> Thanks
> /Mats
>
>
> "Eric Perlin [MS]" wrote:
>
> > Winlogon has to make a few low level smartcard calls before the CSP can
be
> > invoked: SCardEstablishContext, SCardListReaders, SCardGetStatusChange,
> > SCardListCards and SCardGetCardTypeProviderName.
> > The fact that the default message is still displayed indicates that one
of
> > the first 2 calls fails!
> > How is the other application connecting to the reader/card?
> > -- 
> > Eric Perlin [MS]
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> > ---
> >
> >
> > "Mats Pettersson" <MatsPettersson@discussions.microsoft.com> wrote in
> > message news:052579BD-4D2E-4618-85AC-E02104889626@microsoft.com...
> > > Hi,
> > > I'm writing a CSP to be used for Smartcard Logon in Windows XP. I also
> > have
> > > an other application and service that connects to my smartcard reader
in
> > > exclusive mode. All my calls to the smartcard goes throw this
application.
> > > The problem I'm having is that the GINA does not react when a
smartcard
> > > reader is present, ones my security services sets the reader in
exclusive
> > > mode. Hence the option press "Ctrl - Alt - delete" or "put in a Smart
> >  card"
> > > is not shown just the default "Ctrl-Alt-Delete". This makes it
impossible
> > for
> > > me to use SmartCard Login.
> > >
> > > For reasons beyond this question the application must set the
smartcard
> > > reader in exclusive mode.
> > >
> > > Is there a way to tell Windows in login mode that a smartcard reader
is
> > > present even though an other service has connected to the reader in
> > exclusive
> > > mode?
> > >
> > > Thanks
> > >
> > > /Mats
> > >
> > >
> > >
> > >
> > >
> >
> >
> >


Relevant Pages

  • Re: SmartCard login despite exclusive mode to reader
    ... The other application connects to every smartcard ... for about a second then the security service starts and only the default ... they do is connecting to the smartcard in EXCLUSIVE MODE. ... >> reader is present, ones my security services sets the reader in exclusive ...
    (microsoft.public.platformsdk.security)
  • RE: Disabled Smartcard logon?
    ... Well, EXCLUSIVE mode is exclusive mode, ie. once you opened the read with ... directly to the reader. ... Ask the vendor if they have such service which you can use from your CSP code. ... > I’m writing a CSP to be used for Smartcard Logon in Windows XP. ...
    (microsoft.public.platformsdk.security)
  • Re: Smartcard logging - No valid certificates found
    ... Im using the blackberry smart card reader and I dont have problems about the ... compatible with VISTA. ... Im trying to log on to VISTA throug smartcard and when the windows validate ...
    (microsoft.public.windows.vista.security)
  • SmartCard login despite exclusive mode to reader
    ... I’m writing a CSP to be used for Smartcard Logon in Windows XP. ... reader is present, ones my security services sets the reader in exclusive ... reader in exclusive mode. ...
    (microsoft.public.platformsdk.security)
  • Re: was sagt ihr dazu? - hw token proxy
    ... nicht von ihrem Rechner aus onlinebanking machen. ... Was aber hindert den Angreifer daran, einen Trojaner zu schreiben, der ... als ein Klasse2 Reader ohne ein solches Display und die Banken verlangen ... fuer Online-Banking per Smartcard nur einen Klasse2 Reader ...). ...
    (de.comp.security.misc)