After unregistering the DNIe certificate store, add a registry
key for the DNIe smart card middleware. You must also create policies
for certificate protection, exclusive access, and RSA encryption.
Procedure
- On your Windows desktop,
click .
- In the Open field, enter regedit and
click OK.
- Create a smart card key.
- Select HKEY_LOCAL_MACHINE\SOFTWARE\IBM\SOCIAccess\.
- Right-click and select .
- Enter SmartCard.
- Click OK
- Create a AutoDetectCardMiddlewareEnabled policy.
- Select HKEY_LOCAL_MACHINE\SOFTWARE\IBM\SOCIAccess\SmartCard\.
- Right-click and select .
- Enter AutoDetectCardMiddlewareEnabled.
- Right-click AutoDetectCardMiddlewareEnabled and
select Modify.
- In the Value data field, specify 0.
- Click OK.
- Create an IBM® smart
card middleware key.
- Select HKEY_LOCAL_MACHINE\SOFTWARE\IBM\SOCIAccess\SmartCard\.
- Right-click and select .
- Enter Middleware.
- Click OK.
- Select HKEY_LOCAL_MACHINE\SOFTWARE\IBM\SOCIAccess\SmartCard\Middleware\.
- Right-click and select .
- Enter IBM.
- Click OK.
- Set the Cryptographic Service Provider name.
- Select HKEY_LOCAL_MACHINE\SOFTWARE\IBM\SOCIAccess\SmartCard\Middleware\IBM\.
- Right-click and select .
- Enter CSPName.
- Right-click CSPName and select Modify.
- In the Value data field, specify IBM
PKCS11 CSP.
- Click OK.
- Create a CertProtectedByPIN policy.
- Select HKEY_LOCAL_MACHINE\SOFTWARE\IBM\SOCIAccess\SmartCard\Middleware\IBM\.
- Right-click and select .
- Enter CertProtectedByPIN.
- Right-click CertProtectedByPIN and
select Modify.
- In the Value data field, enter 1.
- Click OK.
- Create a ExclusiveAccess policy.
- Select HKEY_LOCAL_MACHINE\SOFTWARE\IBM\SOCIAccess\SmartCard\Middleware\IBM\.
- Right-click and select .
- Enter ExclusiveAccess.
- Right-click ExclusiveAccess and
select Modify.
- In the Value data field, enter 1.
- Click OK.
- Create a RsaEncryptionEnabled policy.
- Select HKEY_LOCAL_MACHINE\SOFTWARE\IBM\SOCIAccess\SmartCard\Middleware\IBM\.
- Right-click and select .
- Enter RsaEncryptionEnabled.
- Right-click RsaEncryptionEnabled and
select Modify.
- In the Value data field, enter 0.
- Click OK.