1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

Add a new smart card provider to use in CLM2

Discussion in 'Windows Security' started by dragonsoft, Sep 21, 2009.

  1. dragonsoft

    dragonsoft Guest

    I installed CLM2 evaluation vertion in my windowserver 2003 R2 32 bit.
    I can be used to issued Certificates well.
    But i got problems with issueing certificate for smart cards
    I use some kind of smart cards such as ACOS, SECUMETRIC ST2, ST3.

    I installed everything of ACOS, SECUMETRIC ST2 AND ST3.
    Then i added some information into webconfig at C:\Program
    Files\Microsoft Certificate Lifecycle Manager\web

    <add key="Clm.SmartCard.Providers" value="Microsoft Smart Card Base
    CSP:MSBaseCSP1,Axalto:AsciSLB1,GemPlus GemSafe:AsciGemPlus1,SafeSign
    Identity Client:AsciAET1,Aladdin eToken:AsciALD1,Siemens
    HiPath:AsciSIE1,Secure Token ST3 CSP v1.0:MSBaseCSP,ST2 RSA
    Cryptographic Service Provider V1.0:ST2" />

    I got provider name in
    HKEY_LOCAL_MACHIN\SOFTWARE\MICROSOFT\CRYPTOGRAPHY\DEFAULT\PROVIDER\ST2
    RSA Cryptographic Service Provider V1.0
    ID: ST2(i just only guessed)


    Then i created a Profile Template with this kind of smart card
    provider.

    When using this Profile Template to issue certificate for smart card i
    get this Error

    PKCS#11 smart card self-service control error: Unknown provider: %1


    Please help me to resolve this problem.
    LuatVV


    --
    dragonsoft
    ------------------------------------------------------------------------
    dragonsoft's Profile:
    View this thread:


     
  2. Paul Adare

    Paul Adare Guest

    On Mon, 21 Sep 2009 13:47:02 +0530, dragonsoft wrote:
    <!--coloro:blue--><span style="color:blue <!--/coloro-->
    > I installed CLM2 evaluation vertion in my windowserver 2003 R2 32 bit.
    > I can be used to issued Certificates well.
    > But i got problems with issueing certificate for smart cards
    > I use some kind of smart cards such as ACOS, SECUMETRIC ST2, ST3.<!--colorc--><!--/colorc-->

    CLM only supports the providers it ships with. You can't add new providers.

    --
    Paul Adare
    MVP - Identity Lifecycle Manager
     
  3. dragonsoft

    dragonsoft Guest

    Many Thanks to U!


    --
    dragonsoft
    ------------------------------------------------------------------------
    dragonsoft's Profile:
    View this thread:


     

Share This Page