| Previous | Next |
| STATUS_SMARTCARD_NO_KEYSET | STATUS_DOWNGRADE_DETECTED |
STATUS_SMARTCARD_IO_ERROR
The smart-card reader or card communication failed
This status should be handled as a device communication problem before chasing Kerberos policy. The card operation failed because Windows could not reliably exchange data with the reader or card.
The cause can be reader firmware, USB power, flaky contact, a minidriver problem, card reset, or middleware interference. KDC-side certificate and trust changes will not repair an I/O path that fails before PKINIT data is produced.
What to inspect
- Check reader insertion/removal events, USB power and reader driver versions.
- Try the same card in another reader and another card in the same reader.
- Correlate failures with smart-card service and device logs.
References
- Microsoft: Smart card certificate requirements and enumeration
- Microsoft: Enabling smart card logon with third-party CAs
- Microsoft Open Specifications: MS-PKCA
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.