VanDyke Software Forums

VanDyke Software Forums (
-   Secure Shell (
-   -   Smart Card Authentication via ssh (

siffland 07-13-2015 05:00 PM

Smart Card Authentication via ssh
I am having issues with Smart Card Authentication via SSH. I am getting the following error:

There was an error creating the signature during public-key authentication: Internal Cryptoki (PKCS#11) error in file Pkcs11Private.cpp on line 460: CKR_MECHANISM_INVALIV(0x00000070)

In my identity or certificate file i am using the following line:


pkcs11key::prov=C:\Program Files\ActivIdentity\ActivClient\acpkcs211.dll
and i get a Fingerprint hash.

I am using SecureCRT Version 7.3.4 (x64 build 839), ActivClient x64 (, connecting to a Red Hat Enterprise Linux 6 server. I am suspecting SecureCRT because i also have Attachmate Reflection X on the same machine and can use it with the Activclient to connect to the server using my smart card.

We need this working to conform to our security guidelines, we have gotten it working with RelectionX, but all of our Administrators like SecureCRT much better (that is why we purchased it).



rtb 07-13-2015 05:15 PM

Hi Sean,

I am sorry to hear about the problem. This issue is not something that can be resolved in the forums.

Please send an email to

Once we have a resolution via email, I will post it to this thread.

lhorstman 07-15-2015 03:33 PM

I'm having exactly the same issue. Windows 7, SecureCRT 7.3.4, ActivClient version, connecting to RHEL 6 with an OpenSSH build version 6.9p1. Same error message as Sean. I'll be emailing support as well.


rtb 07-15-2015 04:25 PM

Hi Luke,

Thanks for the post.

As mentioned, when we have a resolution with regards to using ActivClient, we will post here.

For those reading this post, please note that it would be helpful when sending an email if you could let us know if using the ActivClient middleware is an absolute mandate or something that is not necessary.

rtb 08-08-2015 01:33 PM

Hi All,

We have a new build of SecureCRT that has some changes to work better with ActivClient middleware.

If anyone would like to test it, please send an email to

rtb 09-01-2016 03:18 PM

Hi All,

SecureCRT 8.0 has been officially released, and should work with ActivClient middleware.

If you need assistance, please email

All times are GMT -6. The time now is 05:40 AM.