Unexpected behavior with smart card credentials in Outlook 2013 and 2010

Your smart card PIN is blocked when you use Outlook 2013 or Outlook 2010 to connect to a mailbox on Exchange Server.

Cause

The Outlook client is not properly configured to work with saved smart card credentials.

Resolution

This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, see How to back up and restore the registry in Windows.

To resolve this issue, remove any existing certificate-based credentials from the Credential Manager and use the EnableSmartCard registry setting.

Remove existing certificate-based credentials

The first step to prevent a PIN lockout is to delete any existing certificate-based credentials that were saved by Outlook.

  1. Open Control Panel.
  2. Double-click Credential Manager.
  3. See whether there is a Certificate-Based credential similar to the following: @@BSUgiZQZ54Pf6cEtxKflWHH Also, see whether there is a Generic credential similar to one of the following: MS.Outlook.14:user@domain.com:PUT
    MS.Outlook.15:user@domain.com:PUT

Note 14 indicates Outlook 2010 saved the credential and 15 indicates Outlook 2013.

Configure the EnableSmartCard registry setting

The second step to prevent a PIN lockout is to create the EnableSmartCard registry setting.

Outlook 2010

For Outlook 2010, the EnableSmartCard registry setting was introduced with the Microsoft Outlook 2010 hotfix package dated December 13, 2011 (KB2597028). We recommend that you install the most recent build of Outlook 2010. For more information about the latest applicable updates for Outlook, see How to install the latest applicable updates for Microsoft Outlook (US English only).

To create the EnableSmartCard registry value, follow these steps:

  1. Exit Outlook.
  2. Start Registry Editor.
  3. Create the following registry values at the specified locations:

Note Manually create any registry keys or values if they do not exist.

Outlook 2013

To create the EnableSmartCard registry value, follow these steps:

  1. Exit Outlook.
  2. Start Registry Editor.
  3. Create the following registry values at the specified locations:

Note Manually create any registry keys or values if they do not exist.

More information

The EnableSmartCard registry setting adds the following functionality:

The EnableSmartCard registry value was introduced in the Outlook 2010 hotfix package dated December 13, 2011. For more information about the hotfix package, see Description of the Outlook 2010 hotfix package (x64 Outlook-x-none.msp; x86 Outlook-x-none.msp): December 13, 2011.