Smartcard certificate problem - W7 beta, x86
Hi,I am having an issue with an Aladdin eToken R2. I use the smart card to store a digital certificate & keys for my online banking.Having migrated from WinXP to Vista it worked flawlessly. Now, on W7 it doesn't.I managed to isolate the problem by starting the eToken application and testing if i can read the certificates/keys on the smartcard. I can't, here is the error :eToken error occurred.Action: Read CSP information in [name of smart card device]Error code: 0x80090006.Description: Invalid Signature.Again, this is not a driver problem and don't think is application related because it worked on Vista.I would appreciate any kind of help except sending me to talk to the vendor. -
March 23rd, 2009 10:39pm

There may be some root certificates that need to be imported or updated. See if you can compare the ones from a working machine to your Windows 7 setup. Start up Certificate Manager by typing certmgr.msc at the start menu search dialog box. I am by no means sure that this is the actual problem, but I do believe it provides a starting point.
Free Windows Admin Tool Kit Click here and download it now
March 24th, 2009 3:05am

Hi Darien,Thanks for having the courage to answer my problem, but it definitely isn't certificate related. Using ProcessMonitor, i tried to recreate the scenario and saw that the process used is eTpros.exe and that at some time it gets an Buffer overflow error when accessing HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\eToken Base Cryptographic Provider\Signature.What I'm really wondering is that how could the application/drivers worked when transitioning (from XP) to the very different Vista but for a more "minor" update (Vista-W7) it does not. -
March 24th, 2009 10:17pm

Did you upgrade from XP to Vista and then to Win 7? If so, that could easily explain your issue. Have tried to see if Aladdin eToken R2 errors out on a clean Windows 7 installation?
Free Windows Admin Tool Kit Click here and download it now
March 25th, 2009 3:40am

Hello again,I am running a clean Windows 7 installation, I haven't migrated from Vista. By WinXP-Vista -> good ; Vista->W7 bad i meant switching from, not migrating.As I don't think this problem can be solved right now, I do hope it will be fixed in the RC or RTM editions. I'd like to specify the scenario of the problem, maybe someone else can figure it out:1)I go to the website of my online banking https://bank.2)Asks for certificate which is stored locally on my PC3)I select the certificate 4)Should start the eToken PKI and ask for PIN, but IE 8 says : "Internet Explorer cannot display the webpage". This could also be a IE 8 problem but as I recall, IE 8 on Vista was ok.edit: modifying the compatibility (XP,Vista) for any executable used by the token results in eToken application(s) crashing. -
March 25th, 2009 11:39pm

Your issue seems to be truly legit. Have you submitted feedback using the built-in feedback mechanism? If not, try to post this to the Sticky: Have Comments about Windows 7 Beta? thread.
Free Windows Admin Tool Kit Click here and download it now
March 26th, 2009 2:32am

I found this Googling for the same issue as I am testing for possible issues as we move from XP to 7, which will start as soon as we can get our hands on it. I have the latest drivers, 5 dot something and the etoken works fine in a triple boot of XP Pro and Vista x64 but not Win 7. I have not found a solution but can confirm it is not an isolated issue that you are experiencing. It is not an IE8 issue as I have tested both ways in Vista x86 and x64. I suspect that newer drivers will be released to fix this but would like to see it work now as everything else seems to work perfectly in 7.
April 19th, 2009 7:12pm

Hi I talked to my bank and they provided me with a new generation of smartcard : eToken PRO. Driver installed fine on Windows XP and Windows 7. The issue is still not fixed in Windows 7. I don't think this is driver related. I believe it is a problem with IE 8 but it is strange it manifests on Windows 7 only (token & IE 8 on WinXP is fine). E9ZX maybe you can talk to your Aladdin dealer and ask them about this. I cannot ask my bank to provide help for a beta OS. Hope this will be fixed in the future. BTW, i plan to go back to Vista SP2 when it hits RTW.-
Free Windows Admin Tool Kit Click here and download it now
April 20th, 2009 4:07am

I will try tocontact Aladdin directly and post what I find. In the mean time, I will continue my dual boot between Vista and 7, with 7 as the primary. I want no suprises when we move to 7 company wide.
April 20th, 2009 2:56pm

Got this from them today.... Here is the latest version http://www.alladin.ru/bitrix/redirect.php?event1=download&event2=eToken_PKI_Client_5_1_Win.zip&goto=/upload/iblock/610/eToken_PKI_Client_5_1_Win.zip Try to use it and let me know about result. We have not tested it yet on Windows 7. I tried it with no success, guess we will have to wait for them to make it work...
Free Windows Admin Tool Kit Click here and download it now
April 20th, 2009 11:40pm

Ok, this is what happened, sorry it will be a longer than usual post but I'd like to reproduce the exact steps, maybe in your case it will be different. After i saw your post i downloaded the zip and installed the 32 bit version. I then opened IE 8 and typed but address but it would not load, at all. Even if i waited like an hour the tab would not load any site. Internet connection was fine, firewall could not have been an issue. Testing the eToken on Firefox is succesfull (i get to the 2nd login page), so I think eToken PKI works here. I then thought that IE 8 not loading any site would be a problem with the newest version of eToken PKI. I uninstalled it, rebooted but that didn't work. Secondly I uninstalled both PKI and and Cumulative Security Update for Internet Explorer 8 in Windows 7 Beta (KB963027). Now IE 8 was loading websites so I installed the PKI client and didn't rebooted. Tested : opening the bank's site on IE 8 -> ask for certificate -> select my certificate -> same error as before. opening the bank's site on Firefox -> works ok. This is clearlly an IE 8 issue. I'd really like to hear from you if you managed to get it working. -
April 22nd, 2009 4:23pm

Greetings Dragos,I'm getting some weird errors too with my smartcard and the certificate under W7 and IE8. My understanding, after several tests, it is that the IE8 build includedin W7 Beta is not working properly. If I do use the same drivers andIE8 in Vista x64, everything works. So your conclusion is accurate. The IE8 build included with W7 Beta is crappy. I think we have to wait and see what's coming in the RC.Regards,W7 Beta running on an AMD Semprom 3200+ (1800Mhz) with 2 Gbs of RAM and a built-in Nvidia 6100 VGA, and mate, it runs like a charm! And now on my VAIO FE31M Laptop.
Free Windows Admin Tool Kit Click here and download it now
April 22nd, 2009 4:37pm

I am running the RC build 7077, just installed Firefox and that failed too...
April 22nd, 2009 4:56pm

I am running the RC build 7077, just installed Firefox and that failed too... Let's wait for the official RC build, which should be 7100.Regards,W7 Beta running on an AMD Semprom 3200+ (1800Mhz) with 2 Gbs of RAM and a built-in Nvidia 6100 VGA, and mate, it runs like a charm! And now on my VAIO FE31M Laptop.
Free Windows Admin Tool Kit Click here and download it now
April 24th, 2009 9:32am

Im using build 7077, my smartcard logon to domain with eToken and third party certificate works fine, except signing/encrypting messages with Outlook 2007. I will try this all with new RC...
April 30th, 2009 8:58pm

Just tested with OWA on the new RC, still no joy....
Free Windows Admin Tool Kit Click here and download it now
May 5th, 2009 10:43pm

Your issue seems to be with CSP. My guess is that you don't have the CSPwhich is required by your smartcardon the machine you are trying to access smartcard from. Reason why its working with firefox is because of the fact that firefox uses PKCS#11 API, whereas Internet Explorer uses CryptoAPI(CSP).
June 2nd, 2009 6:35pm

What is CSP? In a dual boot with Vista and 7 ver 7100, it works perfectly in Vista but not in 7. Identical installs of software on the same hardware.
Free Windows Admin Tool Kit Click here and download it now
June 2nd, 2009 6:41pm

I would say you are correct. I don't have CSP errors in the eToken application anymore but in W7 beta it still doesn't work. I hope to be testing the new RC to see if it works, albeit I will install the rc in a .vhd. E9ZX, more about CSP here -
June 2nd, 2009 7:15pm

If you think my reply was helpful then please vote it as helpful.
Free Windows Admin Tool Kit Click here and download it now
June 3rd, 2009 1:26am

Just wanted to confirm the problems persists on Windows 7 RC 32 bit Edit. Windows 7 RTM 64 bit no joy either. waiting for a new driver from Aladdin -
July 10th, 2009 5:45pm

Hi guys, i have exactly the same issue, it works in Windows 7 with firefox, but not with IE8. Any news from Aladdin or Microsoft Dragos ? Thanks
Free Windows Admin Tool Kit Click here and download it now
September 3rd, 2009 5:40pm

Nothing yet. Keep looking at Aladdin's russian website for a new version of PKI client. But I don't honestly expect W7 to be supported before 22 Oct, the retail release of W7.-
September 5th, 2009 11:37am

Hi, Has anybody managed to find the solution for this odd problem? Regards, AlexAlex
Free Windows Admin Tool Kit Click here and download it now
April 26th, 2010 12:05am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics