Gemalto Smart Card

flyingkiwi · 23 Nov 2009

This isn't really a driver issue but more of a some help with local policy / permissions (I think).

I have just put a new Windows 7 PC on our domain and I am having a few troubles getting the Gemalto Smart card to work as a user. This card has the Gemplus esigner which lets us authenticate to connect back to our bank for secure banking.

Basically this PC is in a domain which locks the desktop and programs down so a user cannot access Programs etc. We then place an RDP icon in the start menu and they access their programs via RDP into a terminal server. Only a few programs are run locally on the PC.

When we install the Gemalto software on an XP machine we set permissions on the installation folder for everyone to have read / write access along with the registry key and this works fine an allows users to be able to use this on the local PC.

With Win7 I have tried this but I keep getting "Cannot fine the certificate store" error – however this works as administrator (local PC) which leads me to a permissions thing or a domain setting.

I can insert the smart card and manually import the certificate which reports sucessfull yet the same error occurs.

Has anyone else has this issue or can anyone point me in the right direction?
Cheers

patwhatsthat · 23 Nov 2009

Your issue may be a product of a feature called UAC (User Account Control) settings. They can be adjusted locally in the control panel under user accounts. However in a domain environment the UAC settings may be dictated by a Group Policy setting. Something perhaps to try would be to have the domain administrator log on to the Win 7 machine with his credentials and see if you still have the problem with the Certifcate, if that's successful than he will probably know how to fix it on the local machine. Not sure this will help, but I thought I would throw it out there and perhaps someone else may have another idea.

flyingkiwi · 23 Nov 2009

The UAC is on as administrator anhd this connects back to a Server 2003 domain controller which I cannot see where there is any settings on the policy that mention UAC. There would be on Server 2008 but we use 2003.

I think it has to do with local permissions somewhere - like the Certificates folder - that I cannot find anywhere.

patwhatsthat · 23 Nov 2009

Did he receive the same certifcate related error, when he logged on to the Win7 machine with his Domain Admin Credentials? Did you try disabling user account controls on the local machine just to test it?

flyingkiwi · 23 Nov 2009

I am the domain admin - I did try the suggestion but the same error happened. The issue was due to local PC rights and the domain getting confused somewhere - by making the domain user and local PC admin the smart card certificates could be read again.

This would be a nasty way to fix it if users had access to install programs etc but in our case they cannot access anything locally to do this so we are pretty safe.

patwhatsthat · 23 Nov 2009

great to know you got it working, and thanks for posting back the solution that you were able to use successfully.