Menu

#3 Bad Length 0x80090004 when importing certificate to a blank card

open
nobody
None
5
2014-08-26
2014-02-21
Alex
No

I'm using a gemalto protiva PIV card v1.55 and receive the referenced message when importing from PFX onto a new, blank card. I can read the from the card ok using ActivClient. Any suggestions?

Related

Bug: #3

Discussion

  • Vincent Le Toux

    Vincent Le Toux - 2014-02-21

    Hi,

    This error is CSP specific

    1) check that the pfx file is well formated using openssl
    2) try to import the file using "certutil.exe"
    Don't forget to specify the CSP of the smart card to forward the importation process to the smart card.

    vincent

     
    • Alex

      Alex - 2014-02-21

      PFX was exported from Windows certificate store. I also tried one exported
      from Firefox, same error. It's a 4k key. I tried again with a 2k key and
      got the same error below...

      When checking the "Use this certification authority" I get the following
      0x80090023 The security token does not have storage space available for an
      additional container

      On Fri, Feb 21, 2014 at 12:45 PM, Vincent Le Toux vletoux@users.sf.netwrote:

      Hi,

      This error is CSP specific

      1) check that the pfx file is well formated using openssl
      2) try to import the file using "certutil.exe"
      Don't forget to specify the CSP of the smart card to forward the
      importation process to the smart card.

      vincent

      Status: open
      Created: Fri Feb 21, 2014 04:31 PM UTC by Alex
      Last Updated: Fri Feb 21, 2014 04:31 PM UTC
      Owner: nobody

      I'm using a gemalto protiva PIV card v1.55 and receive the referenced
      message when importing from PFX onto a new, blank card. I can read the from
      the card ok using ActivClient. Any suggestions?


      Sent from sourceforge.net because you indicated interest in
      https://sourceforge.net/p/eidauthenticate/bug/3/

      To unsubscribe from further messages, please visit
      https://sourceforge.net/auth/subscriptions/

       

      Related

      Bug: #3

  • Vincent Le Toux

    Vincent Le Toux - 2014-02-21

    According to "Smart Card Cryptographic Server Provider Notes" (a document not published anymore by Microsoft), NTE_TOKEN_KEYSET_STORAGE_FULL (0x80090023) means that "No room exists on the smart card for additional containers.". That means that the smart card is full.

    Check this page to see how to import manually a pfx file :
    http://wiki.mysmartlogon.com/Save_a_pfx_file_to_a_smart_card

    You can also use certutil to remove containers : certutil -SCInfo CRYPT_DELETEKEYSET

     

Log in to post a comment.