Outlook unexpectedly prompts for smart card authentication


After starting Outlook, you unexpectedly receive a prompt for smart card authentication. The Windows Security dialog box contains the following text:

Insert a smart card


This problem may occur after you install any one of the following updates for Outlook 2010:

2553248 Description of the Outlook 2010 update: April 10, 2012

2597137 Description of the Outlook 2010 hotfix package (x86 Outlook-x-none.msp, x64 Outlook-x-none.msp): February 28, 2012

2597011 Description of the Outlook 2010 hotfix package (x64 Outlook-x-none.msp; x86 Outlook-x-none.msp): December 13, 2011


Please use the following steps to resolve this problem:

NOTE: The following steps are for IIS 7. The steps for earlier versions of IIS are very similar.
  1. In Internet Information Services (IIS) Manager on your Microsoft Exchange Server, select the Autodiscover virtual directory.
  2. In the middle panel, double-click SSL Settings.
  3. Enable the Require SSLcheck box.
  4. Under Client certificates, select Ignore.
  5. In the Actions pane, click Apply.
  6. Repeat steps 1 through 5 for the EWS virtual directory.

More Information

Smart card-based credentials support for Outlook Anywhere (RPC/HTTP) connections was first added to Outlook in the December 13, 2011 cumulative update. Therefore, this support is also available in Outlook if you install any update available after December 13 2011. With this new functionality in Outlook, you will also need to make sure your CAS server certificate settings are properly configured. Even though you may not be using smart card authentication, Outlook now performs additional certficate checks as part of this new smafunctionality.

Please see the following article for instructions on how to configure Outlook 2010 to use smart card credentials

2597028 Smart cards are not supported in Outlook 2010 when you access your mailbox by using Outlook Anywhere (RPC/HTTP)

Article ID: 2704959 - Last Review: 23 Apr 2012 - Revision: 1