Last update: 05/22/2013.
ID Prime .NET troubleshooting step-by-step guide
Apply this procedure to check that your ID Prime .NET configuration is functional. Applicable from Windows XP.
- Under Windows XP, the Microsoft Base CSP shall be installed to support the ID Prime .NET card. In Vista, 7 and 2008 server it is already a part of the system.
- Ensure that your smart card is inserted in the reader before you start this procedure.
Check the reader installation
Run Smartdiag utility software from the Windows main menu and check that your reader and smartcard are both detected. In case you do not have already installed, download and install the software here.
Check the smartcard service properties, it should be in the following state "The smartcard service is available for use":
If the above conditions are not verified, please jump to the smartcardreader troubleshooting guide first.
Check that the smartcard is correctly recognized as a ID Prime .NET card
With the Smartdiag tool, your smartcard shall appear as an "Axalto Cryptoflex .NET" card. If the card type is " Unregistered card", your card is not recognized as a valid ID Prime .NET card.
In such a case, there are several possibilities :
- The Microsoft Base CSP is not installed
- The smartcard Minidriver is not installed (except for XP, the Minidriver being included in the Base CSP).
- The smartcard is damaged
- Check that the Base CSP is available in the list of installed programs in your system.
- Windows XP:
Start >> Settings >> Control Panel >> Add or Remove Programs
- Windows Vista or Seven:
The Base CSP is already installed. However, you may check the presence of the dynamic library basecsp.dll under the directory c:\windows\system32 for 32 bit system and additionally under c:\windows\syswow64 for 64 bit system.
If this is not the case, update your system with the Microsoft package KB909520. Get the package corresponding to your system type here
- Windows XP:
- Check that the smartcard minidriver is correctly installed.
- Windows XP:
The smartcard minidriver is embedded in the Base CSP. If your Base CSP is correctly installed, proceed to next step (reading the card using Minidriver Manager or Card Explorer tool) in order to verify that the smartcard can be correctly read.
- Windows Vista or Seven:
Check the presence of the DLL axaltocm.dll under:
- c:\windows\system32 for a 32 bit system.
- c:\windows\system32 and c:\windows\syswow64 for a 64 bit system.
If the DLL is missing the minidriver shall be installed:
- Get the appropriate Minidriver depending on your system version from Microsoft Update Catalog site. Use the keywords "Gemalto" and "minidrive" to search for the right minidriver in the Microsoft database.
If the smartcard appears in the device manager, you may also use Windows Update to install or update the minidriver for your card:
- Windows XP:
Assuming that both the base CSP and the minidriver have been installed correctly, you may now go to next step to check the smartcard content.
Read ID Prime .NET smartcard using the Minidriver Manager Tool (free tool)
- The Minidriver Manager can be downloaded here
- After installation, launch the Minidriver Manager: Start >> Programs >> Gemalto >> MiniDriver Manager
- In order to access the smartcard, click on "Connect" button:
- Select the reader where the card is inserted then click on "OK":
- The content and properties of your card should be accessible like in this screenshot of the Minidriver Manager. Please note that you can change or unlock the PIN code of your ID Prime .NET smartcard using Minidriver Manager.
If you purchased the Gemalto ID Prime .NET SDK from the Webstore, you may alternatively use the Card Explorer to check the card content. If this is the case, go to next step for instructions.
Read ID Prime .NET smartcard using Card Explorer from the ID Prime .NET SDK available here
This test will require the presence of the Microsoft Base CSP on your machine. It should be downloaded and installed through Windows update for XP, 2000, 2003, for Vista and server 2008, it is already a part of the system.
- Launch the explorer from Start >> ID Prime .NET Smartcard Framework SDK >> 2.1.161 >> Card Explorer, and tick the icon
- in the menu bar to select the reader that contains your smartcard, then OK:
- Select now the key icon in the menu bar and connect to your card using your admin pin code. With a non diversified code, keep the given value:
- You should able to see the content of your smartcard, assuming you entered the right pin code:
Smartcard is not responsive? Try to change the smartcard communication speed
If other (non ID Prime .NET) cards work in the reader, but your Gemalto ID Prime .NET Card does not, it may be that there is a speed negotiation conflict between the cards and your reader. If you have access to another reader on which the Gemalto ID Prime .NET Card works, you can use the CardExplorer tool to set the card to a lower communication speed. Once the Admin pin code has been presented, right click on the ID Prime .NET Smart Card in the explorer then select Properties on the menu, then in the Advanced tab you will be able to set the smartcard speed to a lower value:
In case none of the above methods allows you to see the content of your ID Prime .NET smartcard, assuming that the reader installation is correct as described in the first part, there's a good chance that the non-working card is damaged and needs to be replaced.
Until recently I was managing the certificates on my .net smartcard using this link:
This link is not functional now. Is there any alternative available?
Thank you in advance!
The new site is available here:
how can I login as an admin on a .Net card using Minidriver Manager when I know the admin key ? Can find a way to enter the key.
Thank you in advance for your help.
My reader is ok, but the smartcard is not recognized.
The Gemalto minidriver for .NET smartcard is available for the following recent Windows systems: Windows 7, Windows 8, Windows Server 2012, Windows Server 2008 R2. At the moment, Windows RT keeps the Base CSP / Minidriver cryptographic architecture of Windows 7 & 8 but it does not allow the loading of other minidrivers than the ones natively embedded (PIV and GICS cards). So, at this stage, it is not possible to address the .NET card with its standard minidriver interface. We are discussing with Microsoft to see if this can be improved in further Windows RT versions. The remaining solution is to address the .NET card in PKCS#11 mode, but this limits the number of applications available. For example, the Microsoft usual desktop applications such as Office or Internet Explorer do not use this PKCS#11 mode. For more details, please refer to our website @ http://www.gemalto.com/products/dotnet_card/ (Compatibility tab).