Yubico Forum

Re: Windows 10 AD Logon

2017-01-27T13:14:52+01:00

This is now working in Windows 10 build 15002 and later. Confirmed with a Yubikey 4.

My findings with Windows 10 builds;
14393 (1607 stable):Not working , error 7
14986 (Insider Preview ):Not working, error 7
15002(Insider Preview ):Working!!
15019(Insider Preview ):Working!!

Statistics: Posted by ulflundh — Fri Jan 27, 2017 1:14 pm

ulflundh

2017-01-26T11:47:39+01:00

Just adding my problems as well. CA 2012 R2 , 2012 R2 AD and Windows 10. Cannot login but run as works sometimes and rdp sessions work every time.

Statistics: Posted by ulflundh — Thu Jan 26, 2017 11:47 am

Re: Windows 10 AD Logon

2016-12-09T13:09:06+01:00

He was able to get a PM to me. We will post back what we find here.

Statistics: Posted by dnbrown — Fri Dec 09, 2016 1:09 pm

Re: Windows 10 AD Logon

2016-12-07T08:24:01+01:00

You don't see DnBrown's PM in your inbox or you cannot hit reply? DN did you added him to some "foe" list?

Statistics: Posted by Tom2 — Wed Dec 07, 2016 8:24 am

Re: Windows 10 AD Logon

2016-12-06T21:16:30+01:00

I can't answer to your PM, I'm not trusted Can someone help me?

Statistics: Posted by k1k1 — Tue Dec 06, 2016 9:16 pm

Re: Windows 10 AD Logon

2016-12-05T15:04:21+01:00

I sent you a PM so that we can figure this out and we can come back here to post what we found. I never have run into this error. We have been running PIV for about a year with 450 users.

Statistics: Posted by dnbrown — Mon Dec 05, 2016 3:04 pm

Re: Windows 10 AD Logon

2016-12-04T21:04:44+01:00

Hi

I got this from support, so I'm really interested in how you did get it to work for Windows 10?

//

We have confirmation from Microsoft this is indeed a bug in the Smart-Card authentication on Windows, the bug only affects the YubiKey as it contains multiple applets and the Smart-Card authentication process in Windows 10 does not properly send the applet select command to select the CCID applet for authentication, unfortunately the fix for this will not be available until the next Anniversary update for Windows due out in Spring 2017. we are continuing to work with Microsoft in hoping we can persuade them to release the fix sooner. The bug was introduced when Microsoft began to make changes to the authentication providers as they have begun to deprecate some legacy cryptographic algorithms such as SHA-1.

Statistics: Posted by k1k1 — Sun Dec 04, 2016 9:04 pm

Re: Windows 10 AD Logon

2016-12-02T20:00:00+01:00

I have my environment setup with AD 2012 R2/CA 2012 R2 and working fine with Win7/10 using YK4's via PIV. Let me know if I can be of assistance.

Statistics: Posted by dnbrown — Fri Dec 02, 2016 8:00 pm

Re: Windows 10 AD Logon

2016-12-02T18:36:53+01:00

I also have the exact same problem. Please advise!

Statistics: Posted by k1k1 — Fri Dec 02, 2016 6:36 pm

Re: Windows 10 AD Logon

2016-11-28T11:52:02+01:00

We have same problem, Windows 10 machines with 2012 r2 CA and 2012 r2 AD environment I'm only able to open locked sessions with smart card but not log in to windows 10 machines.

Statistics: Posted by sep1 — Mon Nov 28, 2016 11:52 am

Re: Windows 10 AD Logon

2016-11-21T19:31:26+01:00

My Team is experiencing this exact problem as well. Windows 10, and 8.1 logon doesn't work, however "run as", RDP sessions, and Windows 7 logons work. Also unlocking computers works as well.
We have a 2008r2 CA. I followed the documentation at https://www.yubico.com/wp-content/uploa ... _FINAL.pdf as best I could, but due to the interface being a bit different, there are a few changes.
Any luck solving this?

Statistics: Posted by matthewarmitage — Mon Nov 21, 2016 7:31 pm

Re: Windows 10 AD Logon

2016-10-13T19:41:24+01:00

Hello Frank,

Can you please provide details as to your setup? What version of Windows are you using for your CA? Windows 2008 or Windows 2012?

Best Regards,
Matthew
Yubico Support

Statistics: Posted by mattlegitt — Thu Oct 13, 2016 7:41 pm

Re: Windows 10 AD Logon

2016-10-13T08:14:38+01:00

Hi,

I have the Same Problem, but only tested with Windows 10.

Could anybody help ??

Regards,

Frank

Statistics: Posted by porloepp — Thu Oct 13, 2016 8:14 am

Windows 10 AD Logon

2016-07-12T18:50:07+01:00

I have setup my key in our Windows CA, I can do initial login on windows 7 machines without an but not windows 10, all I get in the error log is the message below.
I am able to unlock a machine with my key though on W10.

Code:

An error occurred while signing a message using the inserted smart card: An unexpected card error has occurred.

Is there a problem or should the certificate have been setup differently from the guide.

Statistics: Posted by TSM — Tue Jul 12, 2016 6:50 pm