RE: SmartCard Your credentials could not be verified.

Hi Paul,

Thanks for posting!

Please help me know if all the clients encountered this issue£®

Based on my research, I would like to suggest you refer to the following
article to enable smart card:

281245 Guidelines for enabling smart card logon with third-party
certification
http://support.microsoft.com/?id=281245

Additionally, I would like to suggest you try the following article to
resolve the issue.
329433 A Revoked Certificate Is Selected If a Certification Authority in
the Chain Has Two Certificates
http://support.microsoft.com/default.aspx?scid=kb;en-us;329433

Hope the information helps. If there is anything that is unclear, please
feel free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
| Thread-Topic: SmartCard Your credentials could not be verified.
| thread-index: AcWSEmsX/nBa3wY3Qqacrl2Rq3RLWA==
| X-WBNR-Posting-Host: 212.47.74.62
| From: =?Utf-8?B?UGF1bCBNY2tlbm5h?= <PaulMckenna@xxxxxxxxxxxxxx>
| Subject: SmartCard Your credentials could not be verified.
| Date: Tue, 26 Jul 2005 11:47:05 -0700
| Lines: 16
| Message-ID: <BE9950FA-59F3-4A02-85EC-7F8DBE346EE1@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.general
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.general:43371
| X-Tomcat-NG: microsoft.public.windows.server.general
|
| Howdy People,
|
| Can someone point me in the right direction i'm trying to setup smartcard
| login but i keep getting the error message "Your credentials could not be
| verified. "
| In the event log of the client PC i get "The client has failed to
validate
| the Domain Controller certificate for %servername% . The error data
contains
| the information returned from the certificate validation process.
Contact
| your system administrator to determine why the Domain Controller
certificate
| is invalid."
| How do i find out why the cert is invalid?
|
| Thanks in advance for any help.
|
| Regards
| Paul Mckenna
|

.

Relevant Pages

  • Re: Client Certificate -> IIS -> SQL - will it work?
    ... it was determined that it was not possible to use client ... > certificates in this manner because the user credentials could not be ... > certificate authentication did not result in delegatable credentials ... i also tried to move the certificate from a first delegation box ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Cannot request computer certificate.
    ... >problem since you can not request a certificate while logged onto the CA. ... Verify that you can ping it by name and IP address from the client ... >> Kerberos, or dns. ... >> List of NetBt transports currently bound to the Redir ...
    (microsoft.public.windows.server.security)
  • Re: The message must contain a wsa:To header
    ... My client app is not generating a trace file. ... the client is not applying the WSE policy at all because of an ... at ApplicationMessagingWS.Dispatch(String messageType, String ... look for a certificate with this subject name in the certificate store ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: Cannot request computer certificate.
    ... I would verify that the certificate services service is running and set to ... Verify that you can ping it by name and IP address from the client ... > Kerberos, or dns. ... > List of NetBt transports currently bound to the Redir ...
    (microsoft.public.windows.server.security)
  • Re: L2TP/IPSec from XP client to Windows 2003 Server
    ... ie no valid cert found on client - contacted Microsoft ... Windows Server 2003 Certificate Authority running ... The next step is to install Certificate Services on the Windows Server ... From Networks Connections on the client, ...
    (microsoft.public.security)