beautypg.com

4 troubleshooting windows xp logon, Troubleshooting windows xp logon, Troubleshooting windows xp logon 4.4 – HID Crescendo Integration User Manual

Page 51

background image

December 1, 2008

© 2008 HID Global Corporation. All rights reserved.

Page 51 of 54

47A3-905, A.1

Crescendo Integration Guide

Microsoft Windows Server 2003

Troubleshooting Windows XP Logon

4.4

Logon message

possible cause

remedy

The card supplied requires

drivers that are not present on

this system.
Please try another card.

No CSP is found corresponding

to the ATR of the inserted card.

Verify if SafeSign Identity Client is

(properly) installed and if SafeSign

Identity Client supports the token.

Use the Token Management Utility /

Token Administration Utility to check

if the token is recognized.

The system could not log you

on. The requested keyset does

not exist on the smart card.

The token is not initialized.
The token does not contain a

Digital ID.

Use the Token Management Utility

/ Token Administration Utility to

initialize the (blank) token.
Use the Token Management Utility /

Token Administration Utility to check

if the token contains a Digital ID.

The system could not log you

on. The smartcard certificate

used for authentication was not

trusted.

Revocation checking has failed

1

.

The token inserted does not

contain a Digital ID valid for log

on purposes.

Verify if the token contains a Digital

ID that is suitable for Windows

logon.

The system cannot log you on

due to the following error: The

parameter is incorrect.

The token inserted does not

contain a Digital ID valid for the

domain.

Verify if the token contains a Digital

ID that is suitable for the domain.

The system could not log

you on. An incorrect PIN was

presented to the smartcard.

The PIN for the token you

inserted, is not correct.

Use the Token Management Utility /

Token Administration Utility to check

the status of the PIN. Token > Show

Token Objects will show the status

of the PIN.
Enter the correct PIN.

The system could not you log on

and the smartcard is blocked

2

.

The PIN for the token you

inserted, is locked.

Use the Token Management Utility /

Token Administration Utility to check

the status of the PIN. Token > Show

Token Objects will show the status

of the PIN.
Unlock the PIN.

The system could not log you

on. Your credentials could not be

verified.

The root certificate for the Digital

ID presented cannot be verified.

Verify if the root certificate is

available and registered in the

Trusted Root Certificate Authorities

certificate store.
Obtain the root certificate (chain).

1 Failing to find and download the Certificate Revocation List (CRL), an invalid CRL, a revoked certificate, and a revocation status of “unknown” are all considered revocation failures.

2 The SafeSign ‘Token is locked’ dialog will also appear.