Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

New eID can't be used to authenticate in Windows #173

Open
DavidB1987 opened this issue Jul 19, 2022 · 3 comments
Open

New eID can't be used to authenticate in Windows #173

DavidB1987 opened this issue Jul 19, 2022 · 3 comments
Labels
enhancement minidriver Windows

Comments

@DavidB1987
Copy link

DavidB1987 commented Jul 19, 2022 •
edited
Loading

The new cards that use the ECC certificates (since somewhere 2021) can no longer be used to authenticate in Windows, as an alternative for login and password.
If you install the latest drivers you can use the card to authenticatie in websites, but not in Windows.

If you put the new eID in the card reader, Windows (on the logon screen) will search for the certificates and will give you the error "No valid certificate were found on this smart card"

This issue does not exist on the older card that use the RSA certificates.

All settings / policies have already been checked and confirmed by Microsoft that they've been applied correctly.

Several government agencies have reported this issue to Microsoft.
Microsoft is also investigating it and pointing towards the drivers and/or what's on (or not on) the cards.

Windows
@Frederikus
Copy link
Contributor

Small update for other people following this issue:

Together with David we looked into this issue, and it is currently being investigated with Microsoft.

@MindSystemm
Copy link

Hello, I'm experiencing the same issue. Do you know if a fix was found ?

@DavidB1987
Copy link
Author

DavidB1987 commented Jul 22, 2024 •
edited
Loading

Update from April 2024:

This issue can 't / won't be fixed.

The new eID uses a new protocol for cryptography (ECC) and Microsoft wants it to be applied more strictly.
The new eID is up to standard but an extra encryption key is missing which Microsoft requires to enable offline login.
FOD BOSA communicated that the new eID will not be provided with this extra key.

The only possibility to get this to work is to file a Change Request at Microsoft to support it without this offline login possibility.
Though FOD BOSA won't file the Change Request as the impact of this doesn't seem to be significantly big enough for Microsoft to take action.
Microsoft communicated that our Government Agency is the only one who reported this issue, from their world wide user base.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement minidriver Windows
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@yoe @Frederikus @MindSystemm @DavidB1987