How do you use a SID800 with multiple certificates and Windows credential provider?
Originally Published: 2010-04-06
Last Modified: 2023-10-06
Article Number
Applies To
RSA SecurID SID800 Authenticator (USB token)
Microsoft Windows 7 Professional
Microsoft Windows 2008 Server
Microsoft Windows Credential Provider
Microsoft certificate-based logon
Issue
Only one certificate on the SID800 is being seen at logon screen
SID800 with two valid certificates from a Windows 2003 CA. When authenticating to a system, only the certificate marked as default in the RSA Control Center is displayed. How do you configure the system to display both certificates for the user to choose from?
Resolution
A Microsoft GPO policy to show all certificates at logon needs to be updated.
http://technet.microsoft.com/en-us/library/ff404287(WS.10).aspx?ppud=4
Update these GPO settings:
Force the reading of all certificates from the smart card
Filter duplicate logon certificates
Or by registry:
You should see two logon tiles, one for each certificate.
Related Articles
SID800-based Token fails with the Error - “Authentication failed because tokencode could not be read from connected token”… Number of Views AFX Connector "Accepted DH prime length is 2048 or higher" message in SecurID Governance & Lifecycle Number of Views RSA Prime: DigiCert Certificate Configuration Scripts Number of Views Troubleshooting SAML Authentications with the RSA Cloud Authentication Service as Identity Provider Number of Views How to disable smart card credential provider on Windows 2012? Number of Views
Trending Articles
How to Change the Token Lifetime Extension Window in Authentication Manager Using rsautil RSA Authentication Manager 8.9 Setup and Configuration Guide FAQ: RSA SecurID Appliance Transition (A450 to A450R2) Report preview and/or generation fails with 'java.lang.NoClassDefFoundError: Could not initialize class net.sf.jasperrepor… RSA Authentication Manager 8.9 Patches and Hotfixes Readme
Don't see what you're looking for?
