question

KimOSullivan-9650 avatar image
0 Votes"
KimOSullivan-9650 asked VickyWang-MFST answered

Pin Policy for Smart Card Login in Windows 10

Is it possible for to set a pin policy for smart card login? We are using PIV cards (OpenFIPS201) in a Windows 10 A/D.

The PIV standard specifies 6-8 digits, however we would like to enforce 8-digit PIN values via policy if possible.

I have reviewed the Smart Card Group Policy and Registry Settings page but there is no mention of this. Is this not supported or is the setting in another area?

windows-10-securitywindows-group-policy
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VickyWang-MFST avatar image
0 Votes"
VickyWang-MFST answered KimOSullivan-9650 commented

Hi,
Thank you for posting in our forum

The following smart card Group Policy settings are in Computer Configuration\Administrative Templates\Windows Components\Smart Card.

The registry keys are in the following locations:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScPnP\EnableScPnP

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CertProp

Hope this information can help you
Best wishes
Vicky

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi yes as I mentioned in my original question I have reviewed these in the Smart Card Group Policy and Registry Settings page (https://docs.microsoft.com/en-us/windows/security/identity-protection/smart-cards/smart-card-group-policy-and-registry-settings). Since PIN policy elements aren't mentioned here I wanted to know if they existed anywhere else.

Thanks,
Kim

0 Votes 0 ·
VickyWang-MFST avatar image
0 Votes"
VickyWang-MFST answered

Hi,
Thank you for your reply and waiting, do you mean to limit the length of the pin code

If you want to limit the length of the password, you can refer to the link below

reference: https://www.techrepublic.com/article/how-to-change-the-complexity-of-your-windows-pin/

If I understand what you mean wrong, you can tell me

Tip: This answer contains the content of a third-party website. Microsoft makes no representations about the content of these websites. We provide this content only for your convenience.

Hope this information can help you
Best wishes
Vicky

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VickyWang-MFST avatar image
0 Votes"
VickyWang-MFST answered

Hi,

Welcome to share your current situation if there are any updates.

Please feel free to let us know if you need further assistance.

Best Regards,
Vicky

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KimOSullivan-9650 avatar image
0 Votes"
KimOSullivan-9650 answered

Hi Vicky,

The PIN complexity settings you referred to are for Windows Hello. This isn't used in my customer's environment and I believe it doesn't affect the Smart Card login in any case.

Looking further I can't see any mention of PIN settings in anything related to smartcard policy. It's likely the OS / Minidriver relies on the card to enforce PIN rules.

Thanks,
Kim

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VickyWang-MFST avatar image
0 Votes"
VickyWang-MFST answered

Hi,

Thank you for waiting and replying

According to my knowledge and search data, if the information provided and the article in the link cannot help you

There may be no good way to solve this problem for the time being, because no relevant settings have been found

Hope this information can help you

Best wishes

Vicky

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VickyWang-MFST avatar image
0 Votes"
VickyWang-MFST answered

Hi,
Welcome to share your current situation if there are any updates.
Please feel free to let us know if you need further assistance.
Best Regards,
Vicky

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.