After pushing GP 6.1.2-83 a few machines display a smart card error

VPN
1

Earlier this week we pushed Global protect 6.1.2-83 and I would say we only had to use Quick Assist and the LAPS password on 10% of our fleet to correct botched installs. But we do see this on some, but not all machines since the update and I’m not entirely sure its Global Protect or some other windows update or GPO or whatever… but at the login screen you’ll see this:

Other user

Smart card error
The smart card requires drivers that are not present on this system. Please try another smart card or contact your administrator.

GlobalProtect Status: Connected
Gateway: (our gateway address)

Sign-in options.

To log in they have to click Sign-in options, and on this screen there are three icons, one looks like a smart card, one a USB key and one a actual physical key. Click the physical key and the user name and password dialog box comes up.

​

Do you think this has anything to do with the rollout of 6.1.2-83?

2

Did you ever work out if GP 6.1.2-38 was causing a smart card issue? We have just rolled out 6.1.2 to some users and have up to a dozen reports of ‘the smart card requires drivers that are not present on this system…’, with users having to select the sign in option.
Not sure it’s global protect at the moment.

3

I think it had to do with GP but we worked around it with an intune policy.

Make Password Default Credential Provider
Administrative Templates

System > Logon

Exclude the following credential providers: (Device) {25CA8579-1BD8-469c-B9FC-6AC45A161C18},{F8A1793B-7873-4046-B2A7-1F318747F427}

And I am still on 6.1.2-83. I never really saw it though, I use windows hello, but the above fixed it for the vast majority who do not (or cannot).

​

Another post with a registry way
https://www.reddit.com/r/paloaltonetworks/comments/hjqgkz/remove\_the\_global\_protect\_signin\_button\_from/