Re: PKCS11 - Device error when getting token info

From: Jakub Gwozdz (gwozdziu_at_rpg.pl)
Date: 11/18/05


Date: Fri, 18 Nov 2005 13:30:41 +0100

Dnia Fri, 18 Nov 2005 03:11:01 -0800, serji napisał(a):

> hi
>
> As I have said in another posts, I am developing a current GINA that hooks
> in the existing MS GINA. It has to support smart card logon.
>
> The problem now is that SOMETIMES, if i insert the card very quicky, I
> receive a CKR_DEVICE_ERROR error when trying
> to get information of a specific token via C_GetTokenInfo() function.
> For test purposes, when this error occurs, i call to the corresponding
> Microsoft GINA to check if it can read the card
> properly.. and it works. MS code read the card well.
> This makes me think that MS code do something (verifications,
> initializations..¿??) that i dont do.
>
> Have you got any idea what is wrong?
> Thanks a lot and sorry for my poor english!

MSGina.dll doesn't use PKCS#11 interface to the card, but CSP equivalent,
which may differs in implementation from P11, depending on card and
middleware vendor.
Are you sure that you are using P11 correctly (i.e. by calling
C_GetFunctionListPtr, C_Initialize, C_GetSlotList before C_GetTokenInfo()?)

And check if Smart Card Resource Manager is tunning before you load P11.dll

-- 
Jakub Gwóźdź
gwozdziu@rpg.pl


Relevant Pages

  • Re: Smart card logon & remote desktop
    ... Card removal/insertion detection is not a part of MS GINA - so there will be no hotfix; ... I use the standard windows GINA, not a custom one. ... > behavior" option (note that it successfully locks the station when I> logon ...
    (microsoft.public.security)
  • Re: Smart card logon & remote desktop
    ... I have a sample of the Gemalto CSP and some cards that they gave me ... Whether it comes from the GINA part of this process or not is not relevant. ... Card removal/insertion detection is not a part of MS GINA - so there will ... station does not become locked whatever the state of the "smart card ...
    (microsoft.public.security)
  • Using Ginastub orginal Gina Dialog not accepting Smartcard PIN
    ... I'm using the gina ... login complete) to a windows service. ... detect the card insertion on winxp SP2. ... I then enter my cards Pin. ...
    (microsoft.public.platformsdk.security)
  • Re: Smartcard removal not detected after login on Windows 2003 server
    ... WLX_SAS_TYPE_SC_REMOVE through the GINA. ... Can we monitor smartcard removal in a service - and thereby not worry ... So is the smart card manager doing the monitoring? ... >> password control, ...
    (microsoft.public.platformsdk.security)
  • Re: Windows logon through smart card.
    ... The card vendor should have a CSP ... You are correct that the certificate is stored only on the smart card. ...
    (microsoft.public.platformsdk.security)