| Previous | Next |
| STATUS_SMARTCARD_CARD_BLOCKED | STATUS_SMARTCARD_NO_CARD |
STATUS_SMARTCARD_CARD_NOT_AUTHENTICATED
The smart card was not authenticated with a PIN
Windows can enumerate a smart-card certificate without being able to use the private key. For logon, the user must authenticate to the card so the card can perform the private-key operation required by PKINIT.
This status is local to card interaction. It should lead to PIN prompt, silent-context, card policy and minidriver checks before changing KDC trust settings or certificate templates.
What to inspect
- Verify whether a PIN prompt was displayed, suppressed, or failed.
- Check card lockout, retry counter, and middleware policy.
- Confirm that the private key operation succeeds outside the failing application if appropriate.
References
- Microsoft: Smart card certificate requirements and enumeration
- Microsoft: Enabling smart card logon with third-party CAs
- Microsoft Open Specifications: MS-PKCA
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.