Shared Generic Smart Card Reader Issue with 17.6 and higher

[damondawson]

On 09/16/2024 After upgrading to VMware Workstation 17.6.0-24238078 the USB-attached smart card reader stopped working. I tried 3 different readers... It would just go to "Checking status..." and after a long time would report "No valid certificates were found on the smart card."  I was using the option under VM > Removable Devices > "Shared Generic Smart Card Reader Interface 0"  I have used it this way for many years.

 

I ended up uninstalling 17.6.0-24238078 and rolled back by installing 17.5.2-23775571 to get it working again.

 

In Oct 2024 I also tried upgrading to 17.6.1-24319023 and it too had the same issue.  This time I tried connecting the main USB device that had the Smart Card reader in it v/s using the "Shared Generic Smart Card Reader Interface 0"  I did this by going to VM > Removeable Devices > "Realtek USB2.0-CRW" This corrected the issue and it started working again. Note: After doing this it removed the "Shared Generic Smart Card Reader Interface 0" and only lists the main USB device "Realtek USB2.0-CRW"

For sure something has changed between 17.5.2, where it was working, and versions 17.6.0 and 17.6.1, where it no longer works.  The workaround limits the ability to use the smart card reader on the host system and multiple VMs, locking it down to only this one VM.

[Dhairya Tomar]

damondawson Requesting you to recreate the issue where it shows  "No valid certificates were found on the smart card."  and share support bundle of the affected VM.

Also share the make and model of the Smart cards where this issue is seen.

[damondawson]

@Dhairya Tomar, thank you for your help.  Since I found that the workaround of using the USB reader, I'm good with the outcome. I just don't have the cycles to put in on creating and working a support ticket right now.  With some year-end demands I'm very busy.  If things lighten up and get some free time, I will do that. Currently, I'm going to have to focus on other priorities (my apologies).   I wanted to at least post it here so that if others have the issue, they at least know the workaround.   Who knows, maybe one of these nice people will have the time to put in an official ticket.

- Damon

[Antoine EVRARD]

Hello,

Same issue here. Please let me know if a solution was found

[damondawson]

The only way I could get it to work is by adding the entire USB device via Removable Devices.  That's working fine what I need, and I haven't had time yet to put in a support ticket as was suggested. If you do have time to do that, and come up with a fix for this, please be sure to return and update the thread here. 

- Damon

[Johannes Luther]

So, I have the same problem. Normally I use the integraded Smartcard reader, which is recognized as a "Shared Broadcom Corp" in removable devices. For my other USB reader it's the same problem, when using it as a "Shared" device.

Rolling back to 17.5.2 resolved the issue.

Unfortunately, for the integrated smartcard reader, there is no workaround, because only the "shared" smartcard option is available.

[damondawson]

@Johannes Luther

Yeah, because the integrated smartcard reader isn't going to be listed in removeable devices, you may be forced to attach a USB reader so you can use the main device from removeable devices or stick with the older version.  I chose to use a USB reader so I can keep current.  I sure hope Broadcom fixes this soon.

- Damon

[Peter Tattam]

I am having a similar issue, even after installing 17.6.1 today. I have a Yubikey 4 Nano which worked in VMWare 17.5.x and older over USB.   Guest OS is win10 and host is win11.  The cards is visible in 17.6.1 and I can connect it either as shared or exclusive use, however apps like chrome or edge are not working.  the piv card is visible to the app, but it is unable to trigger a PIN dialog to get the card working to authenticate with a web site client certificate, and the access light stays on constantly. 

The card works when used directly from the host, and the yubikey management app can see it on the guest (although only in exclusive mode if I recall). I was able to access the piv card directly with my own custom management app in either mode and even run a loopback test using the cert + key with the PIN being specified directly from the app (which is a Win32 app using smart card api calls). Windows identifies via cert manager that the certificate has a private key but I am unable to verify if that is working as reported, it has only remembered that it had a private key in the past.

I've tried the suggestions from yubico but they don't seem to help.

The only workaround I have at the moment is reverting to an earlier vmware workstation version (17.5.x) but would prefer not to as I have other issues which I was hoping to be resolved soon.  (my vm is always saving a memory snapshot when I shut it down, and that's hammering the SSD it's running on unnecessarily, and i seem unable to turn this off)

[damondawson]

The USB attached one works for me for everything once I enabled the entire device from Removeable Devices.  The "Shared Generic Smart Card Reader Interface 0" doesn't work for anything. 

- Damon

[Johannes Luther]

Just tested this again with 17.6.3 and the Shared Generic Smart Card reader works again (at least for me)

[DrWhoIs]

i have the smartcard reader listed as broadcom contacted smartcard and i have installed the latest 17.6.3 but although i can read smartcards, the reading takes up to 2-3 minutes... tried several solutions already but it stays unusable at this point, any help much appreciated

[DrWhoIs]

hi Johannes, did you alter anything, 17.6.3 still does not work for my broadcom internal smartcard reader

[Johannes Luther]

Hi,

it works without any limitations in my Windows 11 VM using 17.6.3

[DrWhoIs]

tested it in my win11 vm and it's the same as in the win10, it takes forever to read out the smart card (government id with government soft)

on the host no problem whatsoever