Doug Engert

Here is what bothers me. The screen shots of ADCS Configure show "OpenSC CSP" Where does it get "OpenSC CSP"? In the past before CNG https://github.com/OpenSC/OpenSC/wiki/SmartCardHSM shows entries for "Crypto...

Although this may not be your problem, it might arise on the 2025 server: https://answers.microsoft.com/en-us/windows/forum/all/windows-security-is-blocking-my-usb-smart-card/bc5ae7c5-a36d-4908-bc68-4a63754ab05b I went look for newer drivers from https://support.identiv.com/scr33xx/ where I was having a problem with...

> I have installed the ADCS feature on the machine, but when I try and select "Microsoft Base Smart Card Crypto Provider", or any of the other "microsoft Enhanced...", "Microsoft...

Also see this: may apply to AD servers? And may not be just PIV. https://answers.microsoft.com/en-us/windowserver/forum/all/windows-11-24h2-smart-card-piv-with-ecc/da950ea3-8bfd-40b9-be0f-b02f6d860509

> I’ve abandoned OpenSc for Microsoft ADCS with NitroKeyHSM. As pointed out, the NitroKeyHSM uses a CardContact chip. Both vendors contribute code to OpenSC. Have you contacted either vendor? @CardContact...

I would also like to point there are only about 4 to 8 active OpenSC developers. None that I know of with access to an AD server with ADCS. Your...

Found videos on installing ADCA: Google for: youtube Active Directory Certificate Services Install Leads to: https://www.youtube.com/watch?v=R4mrcju5wec In this video it has your "Cryptography for CA" window with "Select Cryptographic provider:"...

Not clear if this is problem in pkcs11-tool wrong parameters or the pkcs11 module /lib/libtec.so can not handle the request. Try running with OpenSC SPY. https://github.com/OpenSC/OpenSC/wiki/Using-OpenSC Something like: ``` PKCS11SPY=/usr/lib/pkcs11/lib/libtec.so...

What is libtec.so? What system? Can not find it on internet other then in this issue.

OK, found it: https://optee.readthedocs.io/en/latest/building/userland_integration.html What OS and version? What is opensc version? `opensc-tool --version` What is version of OpenSSL? `openssl version` Without spy, please send output of the examples that...