Gemalto Token – The smartcard is not fully personalised for use

After the February 2021 Windows Updates on Windows 10 , some users complained about their Gemalto ID Prime not being recognized any more or showing the above message.

To note that , ID prime certificates are on the SIM card and will auto transfer to the proper place in order to work.

The first order of business is to look inside the IE options/Certificates if the proper Gemalto one is present.

Open IE properties via Win + R and type inetcpl.cpl

Mysteriously the certificates evaporated .

You cannot import them from the ID prime.

The missing certificates here are a hint, but not the main issue.

Windows logs do not say much as the device inserted is recognized and patched automatically with the standard driver that does not do much.

When plugging in the Gemalto token in a device you will see the following come and go and hear the associated bell :

This will lead you on a wild goose chase, as updating that driver is not solving anything

The below one is the Prime suspect :

If under smart cards you can see written Unknown, than the gemalto MiniDriver needs to be re-installed :

The proper .cab file containing the Minidriver can be found at :

https://www.catalog.update.microsoft.com/Search.aspx?q=Gemalto%20IDPrime%20MD

If you are using Intune you can deploy it to a group of users, or whatever floats you boat:

You can monitor the deployment in the Overview :

Deployment of apps and packages via SCCM and Intune are widely available.  So I assume for a Sysadmin this is a basic task ,I will not do a step by step.

In case of questions, drop me an email, I always reply.