Last week, Microsoft published a new KnowledgeBase article detailing two issues with the way (virtual) Smart Card login is displayed on the Windows 8 and Windows Server 2012 logon screen. The article contains a hotfix to address the issues.
When you use a virtual smart card on a computer that is running Windows 8 or Windows Server 2012, you experience one of the following issues.
Issue with the virtual smart card logon option
After you restart the computer, the virtual smart card logon option is not displayed on the logon screen.
After a user logs on to the computer by using a password and then logs off from the computer, the virtual smart card logon option is displayed as expected on the logon screen.
Issue with the physical smart card logon option
When you have a physical smart card reader connected to the computer, and there is no physical smart card in the smart card reader, after you lock the computer, the virtual smart card logon option is displayed on the logon screen as expected. However, the physical smart card logon option is displayed unexpectedly on the logon screen.
Additionally, if you click the physical smart card logon option, the “Checking Status” status is displayed indefinitely instead of the expected “Insert Smart Card” status.
This issue occurs because there is no order for enumerating smart cards and updating smart card reader information. If smart card reader information is updated before smart card enumeration is performed, the issues that are described occur.
A supported hotfix is available from Microsoft. Download it here.
Related KnowledgeBase articles
281245 Guidelines for enabling smart card logon with third-party certification authorities
2881993 Smart card logon option is displayed incorrectly on the logon screen in Windows 8 or Windows Server 2012