Unblock gemalto .net smart cards using Gemalto response calculator

Gemalto has provided a utility to calculate the response using Gemalto response calculator so that blocked .net smart cards can be unblocked.

First, download and install Gemalto Mini Drive from Gemalto website.

Now, push below group policy on all domain client machines so that users can get challenge when their smart cards are blocked.

Open Group Policy Management Console à Computer Configuration à Administrative Templates à Windows Components à Smart Card à Enabled “Allow Integrated Unblock screen to be displayed at the time of Logon”.

After applying the Group policy, whenever user smart card gets blocked, they will receive a screen which will show them a challenge.

Open Gemalto Response Calculator using below steps.
Click on Start Menu à All Programs à Gemalto à Response Calculator; you will get below application opened.



















Enter the Challenge and Click on Calculate Response. Below is an example image.



















It will generate a response. Ask the user to enter the response in response box and enter New PIN and Confirm PIN.

Comments

Post a Comment

Popular posts from this blog

The System could not log you on. The revocation status of the smart card certificate used for authentication could not be determined

Image
OS: Windows 7, Windows 10 Server OS: Windows 2003, 2008, 2008 R2, 2012, 2012 R2 and Windows Server 2016 Condition: Error message when we use smart to log in on a domain computer. Cause:  This happens when Certificate Authority (CA) service stopped and CA is unable to publish the CRL (certificate revocation list) and revocation list is expired. Solution : Log in to CA server using CA admin user. Click Start à Run à Services.msc and press Enter to open services console. Check “Active Directory Certificate services”, if the service is stopped, then Right Click à Click on Start. Wait for some time, CA should publish the new CRL. If you want to force the CRL publication then follow below steps. Click Start à Run à Control and Press Enter to open Control Panel. Double Click Administrative tools à Double Click on Certificate Authority. Right Click on Revoked Certificates à All Tasks à Publish Now ask user to restart their client machines so that client machines can recei...
Read more

The System could not log you on. The revocation status of the smart card certificate used for authentication could not be determined

Image
OS: Windows 7, Windows 10 Server OS: Windows 2003, 2008, 2008 R2, 2012, 2012 R2 and Windows Server 2016 Condition: Error message when we use smart to log in on a domain computer. Cause:  This happens when Certificate Authority (CA) service stopped and CA is unable to publish the CRL (certificate revocation list) and revocation list is expired. Solution : Log in to CA server using CA admin user. Click Start à Run à Services.msc and press Enter to open services console. Check “Active Directory Certificate services”, if the service is stopped, then Right Click à Click on Start. Wait for some time, CA should publish the new CRL. If you want to force the CRL publication then follow below steps. Click Start à Run à Control and Press Enter to open Control Panel. Double Click Administrative tools à Double Click on Certificate Authority. Right Click on Revoked Certificates à All Tasks à Publish Now ask the user to restart their cl...
Read more