Share via

Cert Base Authentication Using Yubikey

Vikrant Jain 0 Reputation points
2025-07-30T13:09:47.72+00:00

We have manually installed the updated YubiKey Mini driver, and following this installation, we are able to successfully enroll the certificate from the MMC console using the YubiKey and PIN.

However, when attempting to connect via Remote Desktop Protocol (RDP) and providing the smart card PIN, the system prompts for the PIN once again after login. Upon entering the PIN, the following error is displayed:

"YubiKey signing in with a smart card isn't supported for your account."

Could you kindly assist in troubleshooting this issue?

Windows for business | Windows Server | Directory services | Certificates and public key infrastructure (PKI)
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. MADY56 40 Reputation points
    2025-07-30T19:37:24.7933333+00:00

    That error usually means the user account isn’t set up right to log in with a smart card over RDP. A few quick things to check:

    Make sure the user’s AD account allows smart card logon (check if “Smart card required for interactive logon” is set correctly).

    Confirm the cert on the YubiKey is meant for smart card logon and properly mapped to the user.

    Take a peek at your Group Policy to ensure smart card auth is allowed.

    If you’re using any extra credential providers, they can sometimes mess with this—try disabling them temporarily.

    Also, double-check your RDP client supports smart card redirection and is up to date.

    One more tip: try logging in directly on the server console with the YubiKey to see if it’s just an RDP thing or something bigger.

    Hope that helps! Let me know how it goes or if you want to dig deeper into any of these.

    Cheers!

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.