(Optional) Enabling Virtual smart card

In this step, you will create the virtual smart card on the client computer by using the command-line tool, Tpmvscmgr.exe. You must have TPM supported machine to enable Virtual Smartcard.

To create the TPM virtual smartcard:

1. On a domain-joined computer, open a Command Prompt window with Administrative credentials.

Open elevated command prompt

2. In the command prompt, type the following command, and then press ENTER.

C:\Windows\System32>tpmvscmgr.exe create /name TestVSC /pin default /adminkey random /generate 

Using default PIN: 12345678 Creating TPM Smart Card... 

Initializing the Virtual Smart Card component... Creating the Virtual Smart Card component... 

Initializing the Virtual Smart Card Simulator... 

Creating the Virtual Smart Card Simulator... Initializing the Virtual Smart Card Reader... 

Creating the Virtual Smart Card Reader... 

Waiting for TPM Smart Card Device... 

Authenticating to the TPM Smart Card... 

Generating filesystem on the TPM Smart Card... 

TPM Smart Card created. 

Smart Card Reader Device Instance ID = ROOT\SMARTCARDREADER\0000  

C:\Windows\System32> 

Virtual smartcard

3. This will create a virtual smart card with the name TestVSC and generate the file system on the card. The PIN will be set to the default, 12345678. To be prompted for a PIN, instead of /pin default you can type /pin prompt.

Wait several seconds for the process to finish. Upon completion, Tpmvscmgr.exe will provide you with the device instance ID for the TPM Virtual Smart Card. Store this ID for later reference because you will need it to manage or remove the virtual smart card.