On a computer that uses Remote Desktop Protocol (RDP) 6.0 as the terminal service client, you try to log on to a computer that is running Microsoft Windows XP Service Pack 2 (SP2) by using an RDP connection.
When you do this, the smart card authentication fails. Additionally, you receive the following error message:
The system could not log you on. An error occurred trying to use this smart card. You can find further details in the event log. Please report this error to the system administrator.
Additionally, two events may be logged on the Windows XP SP2-based computer.
An event that resembles the following event may be logged in the Application log:
Event Type: Error Event Source: Smart Card Logon Event Category: None Event ID: 5 Date: Date Time: Time User: N/A Computer: Computer Name Description: An error occurred while retrieving a digital certificate from the inserted smart card. The Smart card resource manager is not running.
An event that resembles the following event may be logged in the Security log:
Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 537 Date: Date Time: Time User: NT AUTHORITY\SYSTEM Computer: Computer Name Description: Logon Failure: Reason: An error occurred during logon User Name: UserName Domain: Domain Logon Type: 10 Logon Process: User32 Authentication Package: Kerberos Workstation Name: Workstation Name Status code: 0xC000006D
This problem occurs because the Windows XP SP2-based computer sends invalid data to the computer that uses RDP 6.0 as the terminal service client.
A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.
If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.
Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.
Note Apply the hotfix to the Windows XP SP2-based computer.
You must have Windows XP SP2 installed to apply this hotfix.
You do not have to restart the computer after you apply this hotfix.
Hotfix replacement information
This hotfix does not replace a previously released hotfix.
To use one of the hotfixes in this package, you do not have to make any changes to the registry.
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows XP SP2, 32-bit versions
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates