Re: No Administrator Signing Certificate - Windows 2003 Server



S. Pidgorny
07-09-2005, 10:51 PM
Admin PIN and PUK are the same thing. Not sure if there's a default one -
they're assigned at the same time with the PIN

"Ben" <bjblackmore@xyz.hotmail.com> wrote in message
news:uFTjnlUVFHA.3488@tk2msftngp13.phx.gbl...
> Hi Svyatoslav,
> I'm using Gemplus GPK8000 cards, and have the Gemsafe Tools v3 software
> installed. I only seems to ask for a user PIN & Admin PIN, no PUK. Do you
> know how I'd find the default Admin PIN? I've emailed Gemplus, to see if
> they can supply it. I have 2 more tries on the Admin PIN, before it
becomes
> useless!
>
> Ben
>
> "S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message
> news:O10%23QPUVFHA.3532@TK2MSFTNGP09.phx.gbl...
> > How you unblock the card really depends on the card. In most cases,
there
> > is
> > PUK in addition to PIN that you can use to unlock the card. If you don't
> > know the PUK and don't guess it very quickly, or if the functionality is
> > not
> > there, your card becomes useless. That's a security feature.
> >
> > --
> > Svyatoslav Pidgorny, MS MVP - Security, MCSE
> > -= F1 is the key =-
> >
> > "Ben" <bjblackmore@xyz.hotmail.com> wrote in message
> > news:eB7DmUTVFHA.3244@TK2MSFTNGP15.phx.gbl...
> >> "Brian Komar" <MVPbkomar@nospam.identit.ca> wrote in message
> >> news:MPG.1ce92b4fa86c6b69896a4@msnews.microsoft.com...
> >> >>
> >> >>
> >> >>
> >> > the user performing the smart card request must have an Enrollment
> >> > Agent
> >> > computer installed in their profile. The smart card request must be
> >> > signed with the private key of the Enrollment Agent certificate.
> >> >
> >> > Brian
> >>
> >> Hi Brian,
> >>
> >> Thanks for the info, I'v now added the enrollment agent to my user
> >> profile
> >> and it works, I had added the enrollment agent to my machine, but
> > forgotten
> >> about the user.
> >> One other problem I've just had, I tried to create a smartcard for my
> >> boss
> >> and it asked for a pin, I entered 1234, which is my usual default for
> >> setting up these cards, however it told me it was the wrong pin. I
don't
> >> understand how it could be, as he's never had a pin before. I then
tried
> >> 4321, and 00000000, which were both wrong, and have now blocked the
card.
> >> How do I unblock it? And what PIN should I have entered?
> >>
> >> Cheers
> >>
> >> Ben
> >>
> >>
> >
> >
>
>


Re: No Administrator Signing Certificate - Windows 2003 Server