Outlook unexpectedly prompts for smart card authentication

Symptoms

After starting Outlook, you unexpectedly receive a prompt for smart card authentication. The Windows Security dialog box contains the following text:

Insert a smart card

Cause

This problem may occur after you install any one of the following updates for Outlook 2010:

2553248 Description of the Outlook 2010 update: April 10, 2012
http://support.microsoft.com/default.aspx?scid=kb;EN-US;2553248

2597137 Description of the Outlook 2010 hotfix package (x86 Outlook-x-none.msp, x64 Outlook-x-none.msp): February 28, 2012
http://support.microsoft.com/default.aspx?scid=kb;EN-US;2597137

2597011 Description of the Outlook 2010 hotfix package (x64 Outlook-x-none.msp; x86 Outlook-x-none.msp): December 13, 2011
http://support.microsoft.com/default.aspx?scid=kb;EN-US;2597011


Resolution

Please use the following steps to resolve this problem:

NOTE: The following steps are for IIS 7. The steps for earlier versions of IIS are very similar.
  1. In Internet Information Services (IIS) Manager on your Microsoft Exchange Server, select the Autodiscover virtual directory.
  2. In the middle panel, double-click SSL Settings.
  3. Enable the Require SSLcheck box.
  4. Under Client certificates, select Ignore.
  5. In the Actions pane, click Apply.
  6. Repeat steps 1 through 5 for the EWS virtual directory.

More Information

Smart card-based credentials support for Outlook Anywhere (RPC/HTTP) connections was first added to Outlook in the December 13, 2011 cumulative update. Therefore, this support is also available in Outlook if you install any update available after December 13 2011. With this new functionality in Outlook, you will also need to make sure your CAS server certificate settings are properly configured. Even though you may not be using smart card authentication, Outlook now performs additional certficate checks as part of this new smafunctionality.

Please see the following article for instructions on how to configure Outlook 2010 to use smart card credentials

2597028 Smart cards are not supported in Outlook 2010 when you access your mailbox by using Outlook Anywhere (RPC/HTTP)
http://support.microsoft.com/default.aspx?scid=kb;EN-US;2597028
內容

文章識別碼:2704959 - 最後檢閱時間:2012年4月23日 - 修訂: 1

意見反應