Troubleshooting Smart Card Plug and Play Issues

Applies To: Windows 7, Windows Server 2008 R2

Symptom

After installing or upgrading to Windows 7, smart card Plug and Play detection may not work as expected, and a user or local administrator needs to find and resolve problems that prevent smart card Plug and Play detection on Windows 7 from functioning correctly.

Cause

This section of the guide provides troubleshooting information that helps you find and resolve smart card Plug and Play issues in Windows 7.

Resolution

Before you begin troubleshooting smart card Plug and Play, you should ensure that you can provide administrative credentials. You should also understand smart card solutions that are not compatible with Plug and Play and how smart cards work with Remote Desktop connections.

Administrative credentials

You must be a member of the local Administrators group on the Windows 7–based computer on which you are troubleshooting smart card issues or know the user name and password of a local administrator account. If you are not logged on with an administrator account, you must provide administrator credentials to perform many of the tasks in this guide.

Smart card solutions that are not compatible with Plug and Play

Smart card Plug and Play only supports smart cards that require drivers to function. Not all smart card solutions require drivers for integrating with Windows. These solutions do not use the Windows Smart Card Framework and must be installed on the computer before using the smart card for the first time.

The following solutions are not compatible with smart card Plug and Play:

• Custom cryptographic service provider (CSP)-based solutions.

• Custom key storage provider (KSP)-based solutions.

• Public Key Cryptography Standard #11 (PKCS #11)-based solutions.

• Smart card driver packages without complete INF files or with incorrect device identifications.

• Some multislot smart card readers that create only one device for all available slots in the smart card reader.

Each time a smart card is inserted in the computer, Windows attempts to download and install the smart card driver if it is not already available on the computer. You may see a Plug and Play error when you insert a non-Plug and Play smart card on the computer. This does not necessarily mean that there is a problem with the smart card.

If your deployment uses only non-Plug and Play smart card solutions, smart card Plug and Play can be disabled by a local administrator on a client computer. Disabling smart card Plug and Play prevents smart card drivers, also known as smart card mini-drivers, from downloading and prevents smart card Plug and Play prompts.

To disable smart card Plug and Play in local Group Policy

1. On a client computer, click Start, type gpedit.msc in the Search programs and files box, and then press ENTER.

2. In the console tree under Computer Configuration, click Administrative Templates.

3. In the details pane, double-click Windows Components, and then double-click Smart Card.

4. Right-click Turn on Smart Card Plug and Play service, and then click Edit.

5. Click Disabled, and then click OK.

For enterprise deployments, smart card Plug and Play can be disabled by deploying a Group Policy. For information about administrative templates, see Administrative templates overview for GPMC (https://go.microsoft.com/fwlink/?LinkId=152390).

Remote Desktop connections and smart cards

Smart card Plug and Play works only for local sessions on a computer. The smart card driver must be installed on the local computer before attempting to use smart cards with Remote Desktop connections. The driver can be installed by inserting a Plug and Play–compatible smart card in a smart card reader on the local computer or by manually installing the driver. For information about manually installing drivers, see Manually Install a Smart Card Driver in this guide.

Steps for troubleshooting smart card Plug and Play

The steps to identify and resolve issues associated with smart card detection and driver installation are demonstrated in the following flowchart.

The table follows the troubleshooting steps in the flowchart and provides links to the information about the troubleshooting step that may help you resolve the issue.