Microsoft KB Archive/830858

= Smart card certificate stops working when you modify a user's name in Active Directory =

PSS ID Number: 830858

Article Last Modified on 1/7/2004

-

The information in this article applies to:


 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Server

-





SYMPTOMS
When you modify a user's name in the Active Directory directory service, the certificate on that user's smart card does not work.



CAUSE
This behavior occurs because, after you modify a user's name in Active Directory, the value in the certificate's subject alternative name field does not match the Active Directory UserPrincipleName property value.



WORKAROUND
To work around this issue, issue a new certificate when you update a user's name in Active Directory.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section of this article.

