Access to smart card failed (and Retry or Cancel buttons), SecureLogin was unable to access the smart card. Please check that the reader is enabled and that the smart card is in the re

  • 7940440
  • 19-Aug-2009
  • 26-Apr-2012

Environment

SecureLogin SSO
ActivCard CMS

Situation

Storing credentials on the smart card
Enabling PKI

To enable Single Sign-on smart card support for an example test user only, set the following preferences on the user object using MMC;
  • Certificate Type = Encryption
  • Current Certificate = User Certificate Selected (this is the default)
  • Store SSO data on smart card = Yes
  • User smart card to encrypt SSO data = PKI credentials

When they start SecureLogin, the following errors appear;

  • Access to smart card failed (Retry and Cancel buttons)
  • SecureLogin was unable to access the smart card. Please check that the reader is enabled and that the smart card is in the reader (Retry and Cancel buttons)
  • Access to smart card failed (OK button)

Resolution

Assuming smart card logon to AD works using PKI, this error occurs for one of the following reasons;

  • Ensure the smart card is inserted in the reader and is functioning
  • Ensure you have installed ActivClient v5.4 or later with the hotfixes required for SSO smart card support. 
  • Install NSL after installing ActivClient. NSL will then detect the correct pkcs#11 dll to use to communicate with the smart card.
  • Consider uninstalling both NSL and ActivClient and installing ActivClient and ASL, ensuring you select to use the ActivClient defaults when installing NSL.

If NSL is installed after ActivClient and the smart card settings have been detected, they can be viewed in the registry at the following location;

HKLM/Software/Protocom/SecureLogin/Security

NonRepudiationKeyCSP=ActivCard Gold Cryptographic Service Provider
PrimaryStore=MAD SecondaryStore=SmartCard StorageDeviceInterfaceLibrary PKCS#11=c:windowssystem32acpkcs211.dll