I am trying to read the certificate from the smart card, but I am not sure what to put in for the value?

Q1. what is the format of the value? (in FabrikamCertificate.ini)

I tried the thumbprint of the certificate in the value. value=cdcff4a6d29f3f3b9fc63cd76cffe6c2103363a5 But i got problem when trying to use this infocard.

Error from CardSpace: "Your data could not be retrieve from the managed card provider. Check your network connection, and verify that you have supplied the correct authentication credentials."

Base on the comment, the sample of the value is Certificate Path(Localmachine/my/www.fabrikam.com), hash, filename (in which case you may need certificatepassword=)

Then I try value=currentUser/my/angela,cdcff4a6d29f3f3b9fc63cd76cffe6c2103363a5 and the card cannot be installed.

Note: the certificate in the smartcard is not a HA certificate, and the CA of the certificate in the smart card is already installed in the Trust CA store.

Q2. Must the certificate in the smartcard a HA certificate.

Please advice.

Ronghwa

Q1. Format of the .ini file is that only one of the options hash,path,fileName should be specified. For example you should type:

value=cdcff4a6d29f3f3b9fc63cd76cffe6c2103363a5

or

value=currentUser/my/angela

but NOT value=currentUser/my/angela,cdcff4a6d29f3f3b9fc63cd76cffe6c2103363a5

Please note tha cert name (angela) is case snsitive.

Q2. Certificate shouldn't be HA because it's personal certificate that you should use with your card and HA certificates are intended for company use.

Regarding your problem, I faced simular issue and found workaround to set "AnonymousForCertificate" binding security option instead of "MutualCertificate". The problem with "MutualCertificate" option is that STS needs to authenticate your (ie. angela) certificate and I didn't find any documentation on how to do that.  

Hmmm.

What was the output of CardWriter?. It should tell you if it finds the certificate.

if you use the currentuser/my/angela format, you don't specify the certificate hash.

And no, you don't need an HA certificate for the smartcard (HA certificates aren't even availible yet).

The CardWriter is a bit loose with what it expects for the value (look at the code that digs it out):

if

Thanks bozovic and Garrett for your invaluable insights.

Appreciated,

Ronghwa