We upgraded to 24H2 and now our SCR3310 card reader is no longer recognized and we now cannot log in with our CAC card. Is there a fix?

I read all the information you all posted. I also downloaded the newest version for the SCR3310 and it worked without me having to rollback to the older version.

Thank you all for posting to help try to resolve the issues.

I have run into a similar issue with the update. I went to Identiv and downloaded the latest update for my SCR3xxx CAC card reader, deleted the old drivers, and tried to install the new Identiv driver, but WIndows Device Manager keeps telling me that Windows already has the latest Microsoft drivers for my card reader installed, and won't allow me to choose the Identiv driver and successfully install it. I emailed Identiv's support department twice now in a week and zero response from them. My CAC card works fine with the same Identiv SCR3300 reader on my older computer that runs Win10, as well as my newer US Gov't-issued work computer running Win11 (not sure at this moment what version of Win11 as its the weekend) but I sometimes have to access my work system from home via Citrix Workspace (tried several versions of that as well) without luck on my new machine that runs Win11 v24H2 on Snapdragon XPlus. Since it is only a couple months old, I'm not sure I even have a way to retrograde(then upgrade back after driver updates) to Win11 v23Hxx like some folks with Microsoft Surface laptops that apparently also run ARM processors apparently have successfully done to get their CAC cards to work with Citrix.

Any suggestions/fixes? Thanks!

I found this answer in another similar post, that worked for me.

Open Registry editor and find HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Calais

Right click and select permissions.

Find or Add LOCAL SERVICES.

Grant full access to LOCAL SERVICES.

I had ran into same issue with multiple users and have the fix for the issue

Step 1. uninstall the device in device manager while selecting to remove the driver
Do this until it shows the Microsoft driver shows (Microsoft Usbccid Smartcard Reader.
--- I had to remove the device twice as there are two separate drivers.

Once you have the Microsoft driver you have to set permissions on a registry entry.

HKLM:\SOFTWARE\Microsoft\Cryptography\Calais

You have to give "Local Service" full control over that Calais key
Reboot the PC and you should be good to go. I have fixed 10+ machines this way so far.

Here is a script (I didnt not write it) that does the registry fix for you

Start Powershell ISE as admin and run the following

$acl = Get-Acl HKLM:\SOFTWARE\Microsoft\Cryptography\Calais
$rule = New-Object System.Security.AccessControl.RegistryAccessRule ("local service","FullControl",@("ObjectInherit","ContainerInherit"),"None","Allow")
$acl.SetAccessRule($rule)
$acl |Set-Acl -Path HKLM:\SOFTWARE\Microsoft\Cryptography\Calais

My new Lenovo IdeaPad with Snapdragon XPlus (ARM) still won't recognize my smartcard even after following these instructions. Keeps saying can't find certificate, even though I went through and got the new cert from my IT dept. Looking in device manager, it says "Unknown smartcard".