When you see this error
You're trying to log into a company portal or sign a document with your smart card. Windows throws up a message: "No primary provider can be found for the smart card". The error code is 0X80100020. This usually happens after a Windows update, a driver update, or when you plug in a new smart card reader. I've seen it on Windows 10 version 22H2 and Windows 11 too.
What's going wrong
Windows needs a software piece called a 'cryptographic service provider' to talk to your smart card. This provider is like a translator between the card and Windows. When it's missing or broken, you get this error. The card itself is fine—it's Windows that can't find the right driver or certificate store.
The fix: 5 steps
Skip the fancy tools. Here's what actually works.
Step 1: Check your smart card reader driver
Go to Device Manager (right-click Start, choose Device Manager). Look under 'Smart card readers'. If you see a yellow triangle, the driver is bad. Right-click it, select 'Update driver', then 'Search automatically for drivers'. If nothing changes, go to the reader manufacturer's site (like Gemalto, Identiv, or HID Global) and download the latest driver for your model. Restart your PC after the update.
Step 2: Install the correct certificate
This tripped me up the first time too. The error means Windows can't find a matching certificate for your smart card. You might need to install a certificate from your company's IT. Here's how:
- Open the MMC console (press Windows + R, type
mmc, press Enter). - Go to File > Add/Remove Snap-in. Choose 'Certificates', then 'Computer account'. Click Next, then 'Local computer'. Finish, then OK.
- Expand 'Certificates (Local Computer)' > 'Trusted Root Certification Authorities' > 'Certificates'.
- Right-click any empty space, choose 'All Tasks' > 'Import'. Browse to the certificate file (.cer or .crt) your IT gave you. Follow the wizard. Choose 'Place all certificates in the following store', browse to 'Trusted Root Certification Authorities'.
- Do the same under 'Intermediate Certification Authorities' > 'Certificates'.
Restart your browser or app, then try again.
Step 3: Enable the smart card service
Windows has a service called 'Smart Card' that might be stopped. Press Windows + R, type services.msc, press Enter. Find 'Smart Card' in the list. Double-click it. If it's not running, click 'Start'. Set 'Startup type' to 'Automatic'. Also check 'Smart Card Removal Policy'—set it to 'Automatic' too. Click Apply, then OK. Restart the PC.
Step 4: Re-register the smart card provider DLL
Sometimes the provider file gets unregistered. Open Command Prompt as Administrator (right-click Start, choose 'Windows Terminal (Admin)'). Run these commands one at a time:
regsvr32 /u scardsvr.dll
regsvr32 scardsvr.dllYou'll see a success message for each. Restart your PC.
Step 5: Update Windows
I know this sounds boring, but a Windows update often includes smart card fixes. Go to Settings > Windows Update > Check for updates. Install any pending updates, especially optional ones under 'Advanced options' > 'Optional updates'. Look for driver updates for your smart card reader.
If it still fails
Check with your IT team. They might have a specific provider (like ActivClient or SafeNet Authentication Client) that needs to be installed. Also, try your smart card on another PC—if it works there, the problem is on your machine. If it doesn't work anywhere, the card itself might be damaged.
One more thing: some USB ports don't give enough power to the reader. Plug the reader directly into the PC, not a hub. I've seen that cause weird errors.