4 troubleshooting windows xp logon, Troubleshooting windows xp logon, Troubleshooting windows xp logon 4.4 – HID Crescendo Integration User Manual
Page 51
December 1, 2008
© 2008 HID Global Corporation. All rights reserved.
Page 51 of 54
47A3-905, A.1
Crescendo Integration Guide
Microsoft Windows Server 2003
Troubleshooting Windows XP Logon
4.4
Logon message
possible cause
remedy
The card supplied requires
drivers that are not present on
this system.
Please try another card.
No CSP is found corresponding
to the ATR of the inserted card.
Verify if SafeSign Identity Client is
(properly) installed and if SafeSign
Identity Client supports the token.
Use the Token Management Utility /
Token Administration Utility to check
if the token is recognized.
The system could not log you
on. The requested keyset does
not exist on the smart card.
The token is not initialized.
The token does not contain a
Digital ID.
Use the Token Management Utility
/ Token Administration Utility to
initialize the (blank) token.
Use the Token Management Utility /
Token Administration Utility to check
if the token contains a Digital ID.
The system could not log you
on. The smartcard certificate
used for authentication was not
trusted.
Revocation checking has failed
1
.
The token inserted does not
contain a Digital ID valid for log
on purposes.
Verify if the token contains a Digital
ID that is suitable for Windows
logon.
The system cannot log you on
due to the following error: The
parameter is incorrect.
The token inserted does not
contain a Digital ID valid for the
domain.
Verify if the token contains a Digital
ID that is suitable for the domain.
The system could not log
you on. An incorrect PIN was
presented to the smartcard.
The PIN for the token you
inserted, is not correct.
Use the Token Management Utility /
Token Administration Utility to check
the status of the PIN. Token > Show
Token Objects will show the status
of the PIN.
Enter the correct PIN.
The system could not you log on
and the smartcard is blocked
2
.
The PIN for the token you
inserted, is locked.
Use the Token Management Utility /
Token Administration Utility to check
the status of the PIN. Token > Show
Token Objects will show the status
of the PIN.
Unlock the PIN.
The system could not log you
on. Your credentials could not be
verified.
The root certificate for the Digital
ID presented cannot be verified.
Verify if the root certificate is
available and registered in the
Trusted Root Certificate Authorities
certificate store.
Obtain the root certificate (chain).
1 Failing to find and download the Certificate Revocation List (CRL), an invalid CRL, a revoked certificate, and a revocation status of “unknown” are all considered revocation failures.
2 The SafeSign ‘Token is locked’ dialog will also appear.