Share via

Delete certificate from smartcard with Base Smart Card provider

  • Article

Just a reminder

Certutil -scinfo will list all the cert on the card:

================ Certificate 3 ================
--- Reader: Gemplus USB Smart Card Reader 0
---   Card: Axalto Cryptoflex .NET
Provider = Microsoft Base Smart Card Crypto Provider
Key Container = le-AuthMultiOID-e6c02f48-c2ee-4c0-27765 [Default Container]

No AT_SIGNATURE key for reader: Gemplus USB Smart Card Reader 0

Performing AT_KEYEXCHANGE public key matching test...
Public key matching test succeeded
  Key Container = le-AuthMultiOID-e6c02f48-c2ee-4c0-27765
  Provider = Microsoft Base Smart Card Crypto Provider
  ProviderType = 1
  Flags = 1
  KeySpec = 1 -- AT_KEYEXCHANGE
Private key verifies

Here is the deletion of the cert:

C:\>certutil -delkey -csp "Microsoft Base Smart Card Crypto Provider" "le-AuthMultiOID-e6c02f48-c2ee-4c0-27765"
  le-AuthMultiOID-e6c02f48-c2ee-4c0-27765
CertUtil: -delkey command completed successfully.

spat