PKI log-in not seing card

[Former Member]

We are migrating from User-id/password log-in to PKI card log-in, and I am having a problem which our IT help-desk is not able to fix.

My pki card is recognised by all other applications on my laptop, but not SAP. My laptop is running on Windows 7, and my SAP version is 730.

The error I get is:

---------------------------
SAP GUI for Windows 730
---------------------------
GSS-API(maj): Miscellaneous failure
GSS-API(min): A2200206:Failed to provide signature.
target="p:CN=ap0.siemens.com.sg, C=DE, O=Siemens, OU=SIS"

Error in SNC

Do you want to see the detailed error description?

---------------------------
Yes   No  
---------------------------

And the detailed error description is

---------------------------
SAP GUI for Windows 730
---------------------------
GSS-API(maj): Miscellaneous failure
GSS-API(min): A2200206:Failed to provide signature.
target="p:CN=ap0.siemens.com.sg, C=DE, O=Siemens, OU=SIS"

Time  Thu Feb 07 09:40:53 2013
Component SNC (Secure Network Communication)
Release  730
Version  6
Module  sncxxall.c
Line  3352
Method  SncPEstablishContext
Return Code -4
System Call gss_init_sec_context
Counter  1

---------------------------
OK  
---------------------------

My card works correctly when using a laptop running on XP.

Any ideas?

Regards

JG

[former_member195402]

Hi Julio,

we had login problems for some users not via SAPGUI but with SAP services via hyperlink in email from SAP workflow. The card certificates couldn't be accepted or recognized, the card was not accepted, and the logon screen with username / password was shown. But nobody has the password logon option in our systems,

For these users (including myself) we needed a newer version of the authentication certificate on the card. We finally solved this issue today. Now PKI login works fine in all cases.

Maybe this will help you.

Regards,

Klaus

[Former Member]

Did you solve this issue? I notice that I had two more certs on my PKI card than my other peers.  Still no resolution.  Any help would be appreciated

[Former Member]

Hi Rico,

I did not get a solution. The IT dept here concluded that my card reader was faulty, and have replaced my laptop.

The card reader would mostly work, but could not initialise cards. Adding a keyboard with a card reader did not solve my problem either.

Sorry I can't be of more help.

[Former Member]

Hi JG,

I am using Siemens PKI card now and have exactly the same issue, may I know if your issue has already been solved?

Thanks,

HH

[Former Member]

Hello all,

I am also using Siemens PKI and face the same problem. First I thought it was my card reader but it has been replaced and it still does not work. I'd be obliged if someone could help. The message is: "Failed to provide signature"

Thanks & regards, Wim Schmit

[former_member195402]

Hi Wim,

the following is working for me:

Card type Version: V4.2C

Certificates:

Siemens Issuing CA EE Enc 2011

Siemens Issuing CA EE Auth 2011

SAPGUI: 7.30 PL5

Regards,

Klaus

[Former Member]

Hi,

My issue was solved after upgrading of card reader's driver. I am using HID OMNIKEY 3121 card reader.

Regards,

HH