Windows Embedded Standard 7智能卡登录错误 [英] Windows Embedded Standard 7 Smart Card Logon Error

问题描述

我们的供应商使用WES7的乐器很少。 这些是我们在网络上使用的第一批WES7工具。 几周前，我们强化它们并将它们加入我们的域名/ Active Directory，证书自动注册GPO已启用。 
除智能卡登录外，一切正常。 我们使用了来自不同用户的许多不同的智能卡，但是在按下Control-Alt-Delete登录后都收到了此错误：

"系统无法让您登录。 处理用于身份验证的域控制器证书时检测到不受信任的证书颁发机构。 系统事件日志中还有其他信息。 请联系您的
系统管理员"

我们检查了事件查看器，没有帮助。 我们尝试了很多方法，包括手动导入证书，在工作站上启用证书自动注册但没有任何作用。  PKI团队也无法正常工作。

我自己在测试工作站上选择了WES7 w / Application Compatibility选项的试用版，加入了同一个OU中的域名 并且智能卡登录只是被罚款。

因此，仪器上有一些东西会阻止证书从DC注册。 我捕获了它的wim图像，检查了已安装的软件包以及智能卡登录所需的软件包。

非常感谢任何帮助。 谢谢。

解决方案

WES7图像中必须缺少某些内容，因为它无法正常工作。

在启用了TSCAL的映像中是否有注册表过滤器？他们是否在图像中有智能卡支持？当您加入关闭过滤器的域名时？

您是否已回到制造商处理问题？

We have few instruments with WES7 from a vendor.  Those are the first WES7 instruments we have on the network.  Few weeks ago we hardening them and joined them to our domain w/ Active Directory, certificates auto-enrollment GPO is enabled.  Everything works except for smart card logon.  We have used many different smart cards from different users but all getting this error after hitting Control-Alt-Delete to log on:

"System could not log you on.  An untrusted certificate authority was detected while processing the domain controller certificate used for authentication.  There is additional information in the system event log.  Please contact your system administrator"

We checked Event Viewer, not helpful.  We have tried many ways including manually import the certs, enable cert auto-enrollment on the workstation but nothing works.  The PKI team couldn't make it work either.

I myself install a trial version of WES7 w/ Application Compatibility option selected on a test workstation, joined to the domain in the same OU and smart card logon worked just fined.

So there is something on the instrument that blocks the certs from being enrolled from the DC.  I captured its wim image, checked for the installed packages and the necessary packages for smart card logon are presented.

Any assistance is very much appreciated.  Thanks.

解决方案

There must be something missing in the WES7 image for it not to work.

Do they have the registry filter in the image with TSCAL enabled? Do they have smartcard support in the image? When you joined the domain where the filters turned off?

Have you gone back to the manufacture to work through the problem?

这篇关于Windows Embedded Standard 7智能卡登录错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！