Pin Policy for Smart Card Login in Windows 10

Kim O'Sullivan 1 Reputation point
2021-05-21T02:05:07.463+00:00

Is it possible for to set a pin policy for smart card login? We are using PIV cards (OpenFIPS201) in a Windows 10 A/D.

The PIV standard specifies 6-8 digits, however we would like to enforce 8-digit PIN values via policy if possible.

I have reviewed the Smart Card Group Policy and Registry Settings page but there is no mention of this. Is this not supported or is the setting in another area?

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,794 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,767 questions

6 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vicky Wang 2,646 Reputation points
    2021-05-21T09:26:44.767+00:00

    Hi，
    Thank you for posting in our forum

    The following smart card Group Policy settings are in Computer Configuration\Administrative Templates\Windows Components\Smart Card.

    The registry keys are in the following locations:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScPnP\EnableScPnP

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CertProp

    Hope this information can help you
    Best wishes
    Vicky

  2. Vicky Wang 2,646 Reputation points
    2021-05-24T09:37:15.977+00:00

    Hi，
    Thank you for your reply and waiting, do you mean to limit the length of the pin code

    If you want to limit the length of the password, you can refer to the link below

    reference: https://www.techrepublic.com/article/how-to-change-the-complexity-of-your-windows-pin/

    If I understand what you mean wrong, you can tell me

    Tip: This answer contains the content of a third-party website. Microsoft makes no representations about the content of these websites. We provide this content only for your convenience.

    Hope this information can help you
    Best wishes
    Vicky

    0 comments
  3. Vicky Wang 2,646 Reputation points
    2021-05-27T06:28:33.337+00:00

    Hi,

    Welcome to share your current situation if there are any updates.

    Please feel free to let us know if you need further assistance.

    Best Regards,
    Vicky

    0 comments
  4. Kim O'Sullivan 1 Reputation point
    2021-05-27T23:59:21.557+00:00

    Hi Vicky,

    The PIN complexity settings you referred to are for Windows Hello. This isn't used in my customer's environment and I believe it doesn't affect the Smart Card login in any case.

    Looking further I can't see any mention of PIN settings in anything related to smartcard policy. It's likely the OS / Minidriver relies on the card to enforce PIN rules.

    Thanks,
    Kim

    0 comments
  5. Vicky Wang 2,646 Reputation points
    2021-05-28T09:49:48.76+00:00

    Hi,

    Thank you for waiting and replying

    According to my knowledge and search data, if the information provided and the article in the link cannot help you

    There may be no good way to solve this problem for the time being, because no relevant settings have been found

    Hope this information can help you

    Best wishes

    Vicky

    0 comments