Unlocking the PIN Code Using Microsoft Windows

The Standard Crescendo 2300 card or standard Crescendo key PIN will lock if the user presents a certain number of consecutive incorrect PINs. When the PIN is locked, you cannot use the card until you unlock the PIN.

In this deployment mode, an additional tool is needed to generate the cryptogram based on the input challenge and the default AES ADMIN key (binary value 00000000000000000000000000000000).

Note: For Crescendo 2300 iCLASS cards, in this deployment mode, an additional tool is needed to generate the cryptogram based on the input challenge and the default 3DES ADMIN key (binary value 000000000000000000000000000000000000000000000000).

Other deployment modes with a central credential management system are recommended for a simplified unlock process.

Note: In order to get access to the build-in Windows UI unlock feature, you need to enable Allow Integrated Unblock screen to be displayed at the time of logon in the Windows Group Policy, which is located in: Computer Configuration->Administrative Templates->Windows Components->Smart Card.

If you try to log on with a blocked smart card, or if you exceed the number of incorrect PIN entries, you are prompted to unlock the smart card.

Note: The Microsoft Windows refers to the smart card being “blocked”; this is similar to the smart card PIN being “locked”.
  1. Click OK to start the procedure.
    Alternatively, you can use the Change Password option from the CTRL+ALT+DEL menu. In coordination with your administrator, you obtain an unlock code based on the generated challenge.

  2. Select Unblock smart card.

  3. Provide the Challenge to your administrator, who will generate the unlock code.
  4. Enter the unlock code in the Response field.
  5. Enter and confirm a new PIN code.

  6. Click OK to return to your Windows session.