I need to repeatedly call certutil -recoverkey from powershell using a KRA key held on a smart card. Works fine except that each time it prompts for the smart card PIN. I had thought that PIN was cached per logon session. On reading a bit more it seems the cache is per process. I tried access card from parent powershell process that invokes the certutil - hoping PIN cache we per process tree. Still no luck. Anyone got any ideas on controlling the cache. Note - I'm using Gemalto .net card. Pete

I would suggest contacting Gemalto. They may have a proprietary setting that you can configure to allow for a longer log in period - I know some other vendors I have worked with in the path had that ability.