-->

Note: If a new driver version is found, follow the on-screen prompts to install it on your computer, then restart your machine. If the utility didn’t manage to find an updated driver version, let’s force Windows to reinstall the driver by right-clicking on the same device and choosing Uninstall Device from the context menu. Click Uninstall. It is generally not a good idea to accept hardware driver updates (network, audio, video) offered by Windows Update and if you.

Applies To: Windows 10, Windows Server 2016

This article explains tools and services that smart card developers can use to help identify certificate issues with the smart card deployment.

Debugging and tracing smart card issues requires a variety of tools and approaches. The following sections provide guidance about tools and approaches you can use.

Certutil

For a complete description of Certutil including examples that show how to use it, see Certutil [W2012].

List certificates available on the smart card

To list certificates that are available on the smart card, type certutil -scinfo.

Note

Entering a PIN is not required for this operation. You can press ESC if you are prompted for a PIN.

Download drivers for SUNIX COM Port chipsets (Windows 10 x64), or install DriverPack Solution software for automatic driver download and update Are you tired of looking for the drivers for your devices? Download drivers for SUNIX 1-Port Serial Card chipsets (Windows 10 x86), or install DriverPack Solution software for automatic driver download and update Are you tired of looking for the drivers for your devices? Sunix port devices driver download for windows 10 windows 7. Download SUNIX drivers or install DriverPack Solution software for driver scan and update. SUNIX 10-Port Serial Card. Download drivers for SUNIX devices for free. Sunix Parallel Port Controller SUN1999 for Windows 10 (64-bit) - ThinkStation. Go to Device Manager (right click on My Computer, choose Manage and then find Device Manager in the left panel), or right click on Start Menu for Windows 10 and select Device Manager 3.

Delete certificates on the smart card

Each certificate is enclosed in a container. When you delete a certificate on the smart card, you're deleting the container for the certificate.

To find the container value, type certutil -scinfo.

To delete a container, type certutil -delkey -csp 'Microsoft Base Smart Card Crypto Provider' '<ContainerValue>'.

Debugging and tracing using WPP

WPP simplifies tracing the operation of the trace provider. It provides a mechanism for the trace provider to log real-time binary messages. Logged messages can be converted to a human-readable trace of the operation. For more information, see Diagnostics with WPP - The NDIS blog.

Enable the trace

Using WPP, use one of the following commands to enable tracing:

Accept 00000001 Driver Portal

tracelog.exe -kd -rt -start <FriendlyName> -guid #<GUID> -f .<LogFileName>.etl -flags <flags> -ft 1
logman start <FriendlyName> -ets -p {<GUID>} -<Flags> -ft 1 -rt -o .<LogFileName>.etl -mode 0x00080000

You can use the parameters in the following table.

Friendly name	GUID	Flags
`scardsvr`	13038e47-ffec-425d-bc69-5707708075fe	0xffff
`winscard`	3fce7c5f-fb3b-4bce-a9d8-55cc0ce1cf01	0xffff
`basecsp`	133a980d-035d-4e2d-b250-94577ad8fced	0x7
`scksp`	133a980d-035d-4e2d-b250-94577ad8fced	0x7
`msclmd`	fb36caf4-582b-4604-8841-9263574c4f2c	0x7
`credprov`	dba0e0e0-505a-4ab6-aa3f-22f6f743b480	0xffff
`certprop`	30eae751-411f-414c-988b-a8bfa8913f49	0xffff
`scfilter`	eed7f3c9-62ba-400e-a001-658869df9a91	0xffff
`wudfusbccid`	a3c09ba3-2f62-4be5-a50f-8278a646ac9d	0xffff

Examples

To enable tracing for the SCardSvr service:

tracelog.exe -kd -rt -start scardsvr -guid #13038e47-ffec-425d-bc69-5707708075fe -f .scardsvr.etl -flags 0xffff -ft 1
logman start scardsvr -ets -p {13038e47-ffec-425d-bc69-5707708075fe} 0xffff -ft 1 -rt -o .scardsvr.etl -mode 0x00080000

To enable tracing for scfilter.sys:

tracelog.exe -kd -rt -start scfilter -guid #eed7f3c9-62ba-400e-a001-658869df9a91 -f .scfilter.etl -flags 0xffff -ft 1

Stop the trace

Using WPP, use one of the following commands to stop the tracing:

tracelog.exe -stop <FriendlyName>
logman -stop <FriendlyName> -ets

Examples

To stop a trace:

tracelog.exe -stop scardsvr
logman -stop scardsvr -ets

Kerberos protocol, KDC, and NTLM debugging and tracing

You can use these resources to troubleshoot these protocols and the KDC:

Kerberos and LDAP Troubleshooting Tips.
Windows Driver Kit (WDK) and Debugging Tools for Windows (WinDbg). You can use the trace log tool in this SDK to debug Kerberos authentication failures.

To begin tracing, you can use Tracelog. Different components use different control GUIDs as explained in these examples. For more information, see Tracelog.

NTLM

To enable tracing for NTLM authentication, run the following command on the command line:

tracelog.exe -kd -rt -start ntlm -guid #5BBB6C18-AA45-49b1-A15F-085F7ED0AA90 -f .ntlm.etl -flags 0x15003 -ft 1

To stop tracing for NTLM authentication, run this command:

tracelog -stop ntlm

Kerberos authentication

To enable tracing for Kerberos authentication, run this command:

tracelog.exe -kd -rt -start kerb -guid #6B510852-3583-4e2d-AFFE-A67F9F223438 -f .kerb.etl -flags 0x43 -ft 1

To stop tracing for Kerberos authentication, run this command:

tracelog.exe -stop kerb

KDC

To enable tracing for the KDC, run the following command on the command line:

tracelog.exe -kd -rt -start kdc -guid #1BBA8B19-7F31-43c0-9643-6E911F79A06B -f .kdc.etl -flags 0x803 -ft 1

To stop tracing for the KDC, run the following command on the command line:

tracelog.exe -stop kdc

To stop tracing from a remote computer, run this command: logman.exe -s <ComputerName>.

Note

The default location for logman.exe is %systemroot%system32. Use the -s option to supply a computer name.

Configure tracing with the registry

You can also configure tracing by editing the Kerberos registry values shown in the following table.

Element	Registry Key Setting
NTLM	HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaMSV1_0 Value name: NtLmInfoLevel Value type: DWORD Value data: c0015003
Kerberos	HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaKerberos Value name: LogToFile Value type: DWORD Value data: 00000001 HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaKerberosParameters Value name: KerbDebugLevel Value type: DWORD Value data: c0000043 HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaKerberosParameters Value name: LogToFile Value type: DWORD Value da