| Previous | Next |
| STATUS_SMARTCARD_NO_CARD | STATUS_SMARTCARD_NO_CERTIFICATE |
STATUS_SMARTCARD_NO_KEY_CONTAINER
The requested smart-card key container is missing
A certificate record is not enough for smart-card logon; Windows also needs access to the private key container referenced by the certificate or provider metadata. This status means the provider could not locate that container.
It commonly indicates stale certificate metadata, a reissued certificate without the matching private key on the card, provider mismatch, or an application asking for the wrong container name.
What to inspect
- Compare the certificate with the key container reported by the smart-card provider.
- Check whether the card was reprovisioned or the certificate was imported without the private key.
- Verify CSP/KSP selection and minidriver compatibility.
References
- Microsoft: Smart card certificate requirements and enumeration
- Microsoft: Enabling smart card logon with third-party CAs
- Microsoft Open Specifications: MS-PKCA
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.