Microsoft warns of Windows smart card auth issues after October updates
ID: 9d9b7d0b-6d5f-55ca-83fb-5ee9f226604d
STIX ID: report--9d9b7d0b-6d5f-55ca-83fb-5ee9f226604d
Feed Name: Bleeping Computer
Microsoft's October 2025 security updates enable a fix (DisableCapiOverrideForRSA=1) in Windows Cryptographic Services to mitigate CVE-2024-30098 by preferring Key Storage Provider (KSP) over Cryptographic Service Provider (CSP) for RSA smart card certificates, but this change is causing smart card authentication and certificate-based authentication failures across Windows 10, Windows 11, and Windows Server; Microsoft documents symptoms, a temporary registry workaround (set DisableCapiOverrideForRSA to 0), and advises vendors to update apps to use the Key Storage API for a permanent resolution.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.