topic Re: List Credential Providers with fdecontrol in Endpoint

List Credential Providers with fdecontrol

Robert_Mueller — Fri, 01 Mar 2019 08:12:42 GMT

Hi,

We some issues with the SmartCard Authentication and there is a SK which means, that I have to set the CP provider.. but I' not able to list the Credential Providers...

c:\Program Files (x86)\CheckPoint\Endpoint Security\Full Disk Encryption>fdecontrol.exe list-installed-providers
Unable to list credential providers.
c:\Program Files (x86)\CheckPoint\Endpoint Security\Full Disk Encryption>

It makes no different if I'm admin or not.. any ideas why I'm not able to perfom this?

Rober

Re: List Credential Providers with fdecontrol

Michael_Bybee — Fri, 01 Mar 2019 15:19:56 GMT

We only have one report of this in the SR history and it was a broken install. Without logs or any other information about the situation I would assume a permissions issue or an install that wasnt able to create files or registry entries that it needed. If not that then maybe another program on the machine that is holding this information and we arent able to get it.

you can see the last used credential provider in the registry here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI

You can see all available credential providers here:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers

Are other installs working fine?

Re: List Credential Providers with fdecontrol

Robert_Mueller — Mon, 04 Mar 2019 09:59:27 GMT

Hi,

Mhm.. the installation works except this.. the point is that we see the FDE credential provider in the registry but it seems that it is not selected as default and so we want to set it manually as described in the SK.. but that wont work...

Re: List Credential Providers with fdecontrol

Robert_Mueller — Mon, 04 Mar 2019 10:13:38 GMT

In the dlog1.txt is the followin entry

Das Log File unter C:\ProgramData\CheckPoint\Endpoint Security\Full Disk Encryption\dlog1.txt

fdecontrol.exe:3c38 Exception when getting provider name, Error = key not found

fdecontrol.exe:3c38 Unable to list credential providers.

Robert

Re: List Credential Providers with fdecontrol

Michael_Bybee — Mon, 04 Mar 2019 16:25:09 GMT

This will take some back and forth to resolve so I'd recommend opening an SR with the TAC. Important details they will want from the machine:

1.) CPINFO collected from client GUI>advanced

2.) Do you see the providers in the registry?: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers

3.) If you do this on a machine that has not joined the domain do you get the same problem?

4.) Does GPO block permission to the registry?

5.) Do you have any other security software on the machine that could be blocking us from reading the registry?