Number of incorrect PIN retry attempts is less than expected after you unblock a smart card on a computer that is running Windows Vista, Windows Server 2008, Windows 7, or Windows Server 2008 R2

Symptoms

Consider the following scenario:
  • You have a computer that is running Windows Vista, Windows Server 2008, Windows 7, or Windows Server 2008 R2.
  • You use personal identification number (PIN)-based smart card authentication on the computer.
  • The PIN counter is configured by an administrator.

    Note
    The PIN counter limits the number of times that an incorrect PIN code can be submitted before a smart card is blocked.
  • You unblock a smart card. To do this, you insert the smart card, press Ctrl+Alt+Delete to display the Windows Security screen, and then select the Change a password option.
  • You select the Unblock smart card check box, and then you set a new PIN code to unblock the smart card.
  • When you next use the smart card on the computer, you type an incorrect PIN code.

In this scenario, the number of retry attempts is less than expected. For example, the value of PIN counter is set to 3. However, after you type an incorrect PIN code two times, the smart card is blocked, and you have no other authentication option.

Cause

This issue occurs because an incorrect parameter is set in the SmartcardCredentialProvider.dll file.

Resolution

Hotfix information

Important This hotfix has been re-released to address an issue in which the digital signature on files produced and signed by Microsoft will expire prematurely, as described in Microsoft Security Advisory 2749655.

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must be running one of the following operating systems:
  • Windows Vista Service Pack 2 (SP2)
  • Windows Server 2008 Service Pack 2 (SP2)
  • Windows 7
  • Windows 7 Service Pack 1 (SP1)
  • Windows Server 2008 R2
  • Windows Server 2008 R2 Service Pack 1 (SP1)
For more information about how to obtain a Windows Vista service pack, click the following article number to view the article in the Microsoft Knowledge Base:

935791 How to obtain the latest Windows Vista service pack

For more information about how to obtain a Windows Server 2008 service pack, click the following article number to view the article in the Microsoft Knowledge Base:

968849 How to obtain the latest service pack for Windows Server 2008

For more information about how to obtain a Windows 7 or Windows Server 2008 R2 service pack, click the following article number to view the article in the Microsoft Knowledge Base:

976932 Information about Service Pack 1 for Windows 7 and for Windows Server 2008 R2

Registry information

To apply this hotfix, you do not have to make any changes to the registry.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

File information

The global version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
Windows Vista and Windows Server 2008 file information notes
Important Windows Vista hotfixes and Windows Server 2008 hotfixes are included in the same packages. However, only "Windows Vista" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows Vista" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
  • The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.
    VersionProductSR_LevelService branch
    6.0.600
    2.
    22xxx
    Windows Vista and Windows Server 2008SP2LDR
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows Vista and for Windows Server 2008" section. MUM files and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows Vista and of Windows Server 2008
File nameFile versionFile sizeDateTimePlatform
Smartcardcredentialprovider.dll6.0.6002.22890134,65606-Jul-201214:49x86
For all supported x64-based versions of Windows Vista and of Windows Server 2008
File nameFile versionFile sizeDateTimePlatform
Smartcardcredentialprovider.dll6.0.6002.22890161,28006-Jul-201215:39x64
Smartcardcredentialprovider.dll6.0.6002.22890134,65606-Jul-201214:49x86
For all supported IA-64-based versions of Windows Server 2008
File nameFile versionFile sizeDateTimePlatform
Smartcardcredentialprovider.dll6.0.6002.22890280,06406-Jul-201214:40IA-64
Smartcardcredentialprovider.dll6.0.6002.22890134,65606-Jul-201214:49x86
Windows 7 and Windows Server 2008 R2 file information notes
Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
  • The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.1.760
    0.17xxx
    Windows 7 and Windows Server 2008 R2RTMGDR
    6.1.760
    0.21xxx
    Windows 7 and Windows Server 2008 R2RTMLDR
    6.1.760
    1.17xxx
    Windows 7 and Windows Server 2008 R2SP1GDR
    6.1.760
    1.22xxx
    Windows 7 and Windows Server 2008 R2SP1LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7 and for Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows 7
File nameFile versionFile sizeDateTimePlatform
Smartcardcredentialprovider.dll6.1.7600.17058152,06406-Jul-201221:05x86
Smartcardcredentialprovider.dll6.1.7600.21259152,06406-Jul-201223:15x86
Smartcardcredentialprovider.dll6.1.7601.17889152,06406-Jul-201220:57x86
Smartcardcredentialprovider.dll6.1.7601.22046152,06406-Jul-201220:45x86
For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2
File nameFile versionFile sizeDateTimePlatform
Smartcardcredentialprovider.dll6.1.7600.17058189,95206-Jul-201221:48x64
Smartcardcredentialprovider.dll6.1.7600.21259189,95206-Jul-201221:57x64
Smartcardcredentialprovider.dll6.1.7601.17889189,95206-Jul-201222:01x64
Smartcardcredentialprovider.dll6.1.7601.22046189,95206-Jul-201221:43x64
For all supported IA-64-based versions of Windows Server 2008 R2
File nameFile versionFile sizeDateTimePlatform
Smartcardcredentialprovider.dll6.1.7600.17058342,52806-Jul-201220:38IA-64
Smartcardcredentialprovider.dll6.1.7600.21259342,52806-Jul-201220:44IA-64
Smartcardcredentialprovider.dll6.1.7601.17889342,52807-Jul-201204:24IA-64
Smartcardcredentialprovider.dll6.1.7601.22046342,52806-Jul-201220:46IA-64

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional file information

Additional file information for Windows Vista and for Windows Server 2008

Additional files for all supported x86-based versions of Windows Vista and of Windows Server 2008
File nameUpdate.mum
File versionNot Applicable
File size2,412
Date (UTC)17-Sep-2012
Time (UTC)08:03
PlatformNot Applicable
File nameX86_b5d1e158f8e4e73512281c4be3405804_31bf3856ad364e35_6.0.6002.22890_none_3fd4a094922e36d8.manifest
File versionNot Applicable
File size730
Date (UTC)17-Sep-2012
Time (UTC)08:03
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.0.6002.22890_none_4419771cd91a254f.manifest
File versionNot Applicable
File size8,961
Date (UTC)06-Jul-2012
Time (UTC)15:28
PlatformNot Applicable
Additional files for all supported x64-based versions of Windows Vista and of Windows Server 2008
File nameAmd64_4c04ed5969e9128e9dd15b8631449df4_31bf3856ad364e35_6.0.6002.22890_none_69075af95fff6103.manifest
File versionNot Applicable
File size1,108
Date (UTC)17-Sep-2012
Time (UTC)08:03
PlatformNot Applicable
File nameAmd64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.0.6002.22890_none_a03812a091779685.manifest
File versionNot Applicable
File size8,987
Date (UTC)06-Jul-2012
Time (UTC)16:00
PlatformNot Applicable
File nameUpdate.mum
File versionNot Applicable
File size2,430
Date (UTC)17-Sep-2012
Time (UTC)08:03
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.0.6002.22890_none_4419771cd91a254f.manifest
File versionNot Applicable
File size8,961
Date (UTC)06-Jul-2012
Time (UTC)15:28
PlatformNot Applicable
Additional files for all supported IA-64-based versions of Windows Server 2008
File nameIa64_c9df6f1702f6cc73654d5655057ee755_31bf3856ad364e35_6.0.6002.22890_none_658db737ef823a35.manifest
File versionNot Applicable
File size1,106
Date (UTC)17-Sep-2012
Time (UTC)08:03
PlatformNot Applicable
File nameIa64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.0.6002.22890_none_441b1b12d9182e4b.manifest
File versionNot Applicable
File size8,974
Date (UTC)06-Jul-2012
Time (UTC)15:08
PlatformNot Applicable
File nameUpdate.mum
File versionNot Applicable
File size2,255
Date (UTC)17-Sep-2012
Time (UTC)08:03
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.0.6002.22890_none_4419771cd91a254f.manifest
File versionNot Applicable
File size8,961
Date (UTC)06-Jul-2012
Time (UTC)15:28
PlatformNot Applicable

Additional file information for Windows 7 and for Windows Server 2008 R2

Additional files for all supported x86-based versions of Windows 7
File nameUpdate-bf.mum
File versionNot Applicable
File size2,274
Date (UTC)17-Sep-2012
Time (UTC)12:28
PlatformNot Applicable
File nameUpdate.mum
File versionNot Applicable
File size2,321
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameX86_1e37f809e41af70528b5f1db60c16e6c_31bf3856ad364e35_6.1.7601.17889_none_ab6e61499de8bc8b.manifest
File versionNot Applicable
File size730
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameX86_5cfa9e0745b3cdf561d1925bac906e05_31bf3856ad364e35_6.1.7601.22046_none_8164bf648d2114d1.manifest
File versionNot Applicable
File size730
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameX86_b4666501b36eb66cad792d8554a7d7f6_31bf3856ad364e35_6.1.7600.17058_none_cb071c640195bae1.manifest
File versionNot Applicable
File size730
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameX86_ce76b379543aa20d7918b4f983875e67_31bf3856ad364e35_6.1.7600.21259_none_40746cc62eba7377.manifest
File versionNot Applicable
File size730
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7600.17058_none_42044f0523c60131.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)21:32
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7600.21259_none_428eee003ce2b779.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)23:51
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.17889_none_43cb66552103a42c.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)21:24
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.22046_none_447d1a143a03bb6f.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)21:13
PlatformNot Applicable
Additional files for all supported x64-based versions of Windows 7 and of Windows Server 2008 R2
File nameAmd64_05e1347e884643137db8e6b4e4d418db_31bf3856ad364e35_6.1.7601.17889_none_fd94801c3a5c472e.manifest
File versionNot Applicable
File size1,108
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_1e37f809e41af70528b5f1db60c16e6c_31bf3856ad364e35_6.1.7601.17889_none_078cfccd56462dc1.manifest
File versionNot Applicable
File size732
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_327616a9cbf92a2661eda61a007bf921_31bf3856ad364e35_6.1.7600.17058_none_985037537e63be4a.manifest
File versionNot Applicable
File size1,108
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_39dbe48ccbf2a466b4521535537e2853_31bf3856ad364e35_6.1.7601.17889_none_ee353ab1dc9d3db8.manifest
File versionNot Applicable
File size734
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_4bbde0e3247b752c97407660912e531e_31bf3856ad364e35_6.1.7601.22046_none_3b10420ec0e01597.manifest
File versionNot Applicable
File size1,108
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_58244908b4aaf51a3b6e54a452970ecd_31bf3856ad364e35_6.1.7600.21259_none_5da6d9bc599ce704.manifest
File versionNot Applicable
File size734
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_5cfa9e0745b3cdf561d1925bac906e05_31bf3856ad364e35_6.1.7601.22046_none_dd835ae8457e8607.manifest
File versionNot Applicable
File size732
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_9df757114ed93e7966cd9a03675eb052_31bf3856ad364e35_6.1.7600.17058_none_3452144561857ca0.manifest
File versionNot Applicable
File size734
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_9f030e5d836052a843be37888b197b0b_31bf3856ad364e35_6.1.7601.22046_none_652de0da05a86f46.manifest
File versionNot Applicable
File size734
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_b4666501b36eb66cad792d8554a7d7f6_31bf3856ad364e35_6.1.7600.17058_none_2725b7e7b9f32c17.manifest
File versionNot Applicable
File size732
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_ca00113cd3df96937e08e39bb5ca2ae8_31bf3856ad364e35_6.1.7600.21259_none_1d990004bb7e9332.manifest
File versionNot Applicable
File size1,108
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_ce76b379543aa20d7918b4f983875e67_31bf3856ad364e35_6.1.7600.21259_none_9c930849e717e4ad.manifest
File versionNot Applicable
File size732
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameAmd64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7600.17058_none_9e22ea88dc237267.manifest
File versionNot Applicable
File size4,942
Date (UTC)06-Jul-2012
Time (UTC)22:27
PlatformNot Applicable
File nameAmd64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7600.21259_none_9ead8983f54028af.manifest
File versionNot Applicable
File size4,942
Date (UTC)07-Jul-2012
Time (UTC)00:36
PlatformNot Applicable
File nameAmd64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.17889_none_9fea01d8d9611562.manifest
File versionNot Applicable
File size4,942
Date (UTC)06-Jul-2012
Time (UTC)22:30
PlatformNot Applicable
File nameAmd64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.22046_none_a09bb597f2612ca5.manifest
File versionNot Applicable
File size4,942
Date (UTC)06-Jul-2012
Time (UTC)22:09
PlatformNot Applicable
File nameUpdate-bf.mum
File versionNot Applicable
File size3,533
Date (UTC)17-Sep-2012
Time (UTC)12:28
PlatformNot Applicable
File nameUpdate.mum
File versionNot Applicable
File size3,603
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7600.17058_none_42044f0523c60131.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)21:32
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7600.21259_none_428eee003ce2b779.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)23:51
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.17889_none_43cb66552103a42c.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)21:24
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.22046_none_447d1a143a03bb6f.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)21:13
PlatformNot Applicable
Additional files for all supported IA-64-based versions of Windows Server 2008 R2
File nameIa64_4d73949e4557860e329d83edb453079d_31bf3856ad364e35_6.1.7600.17058_none_a0d41b34fbbb4acb.manifest
File versionNot Applicable
File size1,106
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameIa64_4e9a45dac31a4a9958a121b99b57ad8f_31bf3856ad364e35_6.1.7601.17889_none_408e82b583b6cd04.manifest
File versionNot Applicable
File size1,106
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameIa64_d27c7ea5d93410847c60d3cf9d7fd86b_31bf3856ad364e35_6.1.7601.22046_none_dbb916f714caaf6b.manifest
File versionNot Applicable
File size1,106
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameIa64_fff842aceb9d4cbfc0924ee2f1de3e0f_31bf3856ad364e35_6.1.7600.21259_none_bcdc8b6bf9899db3.manifest
File versionNot Applicable
File size1,106
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameIa64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7600.17058_none_4205f2fb23c40a2d.manifest
File versionNot Applicable
File size4,940
Date (UTC)06-Jul-2012
Time (UTC)22:24
PlatformNot Applicable
File nameIa64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7600.21259_none_429091f63ce0c075.manifest
File versionNot Applicable
File size4,940
Date (UTC)07-Jul-2012
Time (UTC)00:36
PlatformNot Applicable
File nameIa64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.17889_none_43cd0a4b2101ad28.manifest
File versionNot Applicable
File size4,940
Date (UTC)07-Jul-2012
Time (UTC)04:58
PlatformNot Applicable
File nameIa64_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.22046_none_447ebe0a3a01c46b.manifest
File versionNot Applicable
File size4,940
Date (UTC)06-Jul-2012
Time (UTC)22:06
PlatformNot Applicable
File nameUpdate-bf.mum
File versionNot Applicable
File size1,909
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameUpdate.mum
File versionNot Applicable
File size1,947
Date (UTC)17-Sep-2012
Time (UTC)12:27
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7600.17058_none_42044f0523c60131.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)21:32
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7600.21259_none_428eee003ce2b779.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)23:51
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.17889_none_43cb66552103a42c.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)21:24
PlatformNot Applicable
File nameX86_microsoft-windows-a..dcredentialprovider_31bf3856ad364e35_6.1.7601.22046_none_447d1a143a03bb6f.manifest
File versionNot Applicable
File size4,938
Date (UTC)06-Jul-2012
Time (UTC)21:13
PlatformNot Applicable
Właściwości

Identyfikator artykułu: 2729670 — ostatni przegląd: 10.10.2012 — zmiana: 1

Opinia