Avatar of Berkson Wein
Berkson Wein
Flag for United States of America asked on

Win7, VPN using client certificate. Won't save setting, insists on using Smart Card


I am working with a Microsoft VPN server setup that uses client certificates.  It works fine on all machines XP and Win 7, except for one new Win 7 machine.

This is a Windows 7 Pro laptop, an HP EliteBook 8460w.  It has a smart card slot which isn't being used.

The problem is that we're getting an error message:
Network Connections (window title)
Cannot load dialog.
Error 764: No smart card reader is installed.

It shouldn't be looking for a smart card reader.  In the VPN setup on the Security tab, Use Extensible Authentication Protocol (EAP) is selected and Microsoft: Smart Card or other certificate (encryption enabled).  Then under properties I select "Use a certificate on this computer" and complete the server names and root authorities.  

Now here's the oddity: if I click ok and ok again to close the vpn properties, when I go back to properties "Use my smart card" is selected not the radio button that tells it to use a certificate!

I can't imagine that this is a group policy issue, as other Win 7 pro machines are fine.  Unfortunately, there's not another HP  8460w laptop to test with.

Symantec Endpoint Protection 12.1 was originally installed on the machine.  Disabling it didn't make a difference.  Now I've uninstalled it completely, still with no change.  Everything else is a basic install, no different from the other machines in the network.

There's nothing that I see in the event log that relates.

I have uninstalled the Smart Card driver software package, stopped the smart card service, and disabled the smart card in the bios (and combinations).  Doesn't seem to make a difference.

Crazy right?

Any suggestions?  Thanks.
VPNWindows 7Encryption

Avatar of undefined
Last Comment
Berkson Wein

8/22/2022 - Mon
SOLUTION
0x6

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Berkson Wein

ASKER
Yep, been there done that.  I've deleted and recreated a bunch of times.  Different names and even a different IP address for the server.

The smart card / user certificate option in the drop down is one item, then you goto properties and select smart card OR certificate.
SOLUTION
David Johnson, CD

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Berkson Wein

ASKER
I had already used the cleanwipe tool from symantec to completely remove everything.  

serverman- thanks for that thought.  There is no broadband software on that machine either.

We've given up as the user was out of time - wound up reformatting completely, reinstalling everythnig (including SEP) and all is well in the world.  Too strange.  I wish that I had more time to diagnose...

Thanks for the help.
ASKER CERTIFIED SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Berkson Wein

ASKER
Had to reinstall the os due to time contraints, though other suggestions here might be helpful to others.
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck