Windows 10: GP Disable PIN change for Smartcard

Under local group policy editor, is there a way to disable change smart card PIN at Ctl Alt Del? We don't want our users changing their PINs for their smart cards on their computers. I hope this makes sense.

:)

 

Smartcard service never stays in "Automatic" mode

Hello,

For some banking operation, we (my company) must use a USB smartcard reader. Despite our efforts, the smartcard service is always disabled at startup, which is pretty annoying considering the operator is not administrator on its computer.

Any idea about that?

 

Windows 10 Smartcard removal

I know this is old but.

If you setup PIN login in windows 8 or 10 then this uses a 'virtual smartcard'

If you used this feature (at all) then you would have been prompted for the PIN to unlock the certificates private key associated with the VSC.

alternatively if you clicked the key icon on the login prompt, you could use password authentication.

In some cases though it would have presented you with the certificate particulars not provided a interface to change to password entry and would have been wanting the pin code to unlock the container.

Hope this helps others.

Cheers

Scobber

 

I found this registry hack:

...follow these steps to enable or disable the function that lets users change the smart card PIN:


1. Start Registry Editor. To do this, press the Windows logo key+R, type regedit, and then click OK.
2. Locate and then click the following registry key:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\
3. On the Edit menu, point to New, and then click Key.
4. Type SmartCardCredentialProvider, and then press Enter.
5. On the Edit menu, point to New, and then click DWORD Value.
6. Perform one of the following actions, based on the kind of smart card on which you want to restrict functionality:
· For VSCs, type AllowVirtualSmartCardPinChangeAndUnlock, and then click Modify.
· For physical smart cards, type AllowSmartCardPinChangeAndUnblock, and then click Modify.
7. Type 1 in the value data box, and then click OK.

Note If you set either the AllowVirtualSmartCardPinChangeAndUnlock or AllowSmartCardPinChangeAndUnblock value to 1, users can change the format of the PIN. If you set the value to 0, users cannot change the format of the PIN.