How do you disable windows 11 Credential Provider when using Signtool with Safenet token?

Software CDS 0 Reputation points
2023-12-31T21:55:38.0233333+00:00

Originally Posted At: https://answers.microsoft.com/en-us/windows/forum/windows_11-security/how-do-you-disable-windows-11-credential-provider/b500f260-23c6-4360-8875-31db512daed4?messageId=096d4709-5e83-49cc-a8cf-94e76503a896

Signing a Exe or Dll using Signtool with SafeNet client USB token behavior has changed.

I used to get a password Dialog from the SafeNet Client where i passed it a password.

Windows 11 seems to be brokering this all of a sudden. I get a Windows Security Dialog (Smart Card) Enter your PIN pops up instead. It's not your Windows 11 PIN. It's looking for the token password. I can't pass this a password!

Can this be disabled or controlled? I would like to use Safenet's login (or no login would be best) where I have more control. I can't find any documentation regarding this.

Note: using /p with signtool.exe doesn't seem to work with a USB signing token.

The following two Windows 11 Machines with different popup dialogs.

Same version of Windows. Version: 23H2 (OS Build 22631.2792)

Same version of VS2022. Version: (17.8.3)

Same version of SignTool. Version: WinSDK - (C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0)

Same version of SafeNet Client - Version: 10.8 R6 (10.8,2153.0)

Group Policies match on both machines: Administrative Templates\Windows Components\Smart Card

Brokers Match on both machines: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers

Any help would be greatly appreciated. I'm unable to do automated build and deploy because of this issue. The goal is to do away with the prompting.

Machine 1Machine 1

Machine 2Machine 2

Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Anonymous
    2024-01-02T08:51:39.26+00:00

    Hi Software CDS,

    Welcome to the Microsoft Q&A Learn. It seems that the computer recognized the SafeNet client USB token as a Smart Card. Can I know if you have tried to use the Token Password in the Smart Card PIN window?

    User's image

    Also, I understand that you have already tried to disable service, modify GP policy and registry but didn't take effect. Please also tried to clear SSL certificates to see if it works. We have experienced similar issue and resolved by it.

    1. Open the Start menu.
    2. Search for and open Internet Options.
    3. In the dialogue box that appears, select the Content tab.
    4. Click Clear SSL State.

    User's image

    Best Regards,

    Ian Xue


    If the Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.