Dears NCryptoki's team ,

i try to add a certificate to my RSA SecureID800 , but whenever i restart my application , i find no certificates in the token , am i doing something wrong ?? :

#region Insert Cert

X509Certificate2 cert = new X509Certificate2(@"D:\Cert\X.pfx","0000");

//STORE CERTIFICATE
CryptokiCollection certTemplate = new CryptokiCollection();
certTemplate.Add(new ObjectAttribute(ObjectAttribute.CKA_CLASS, CryptokiObject.CKO_CERTIFICATE));
certTemplate.Add(new ObjectAttribute(ObjectAttribute.CKA_LABEL, "MyLabel"));
certTemplate.Add(new ObjectAttribute(ObjectAttribute.CKA_CERTIFICATE_TYPE, Certificate.CKC_X_509));
certTemplate.Add(new ObjectAttribute(ObjectAttribute.CKA_TOKEN, true));
certTemplate.Add(new ObjectAttribute(ObjectAttribute.CKA_SUBJECT, cert.SubjectName.RawData));
certTemplate.Add(new ObjectAttribute(ObjectAttribute.CKA_ID, Encoding.ASCII.GetBytes("MyKeyPairID")));
certTemplate.Add(new ObjectAttribute(ObjectAttribute.CKA_VALUE, cert.RawData));
certTemplate.Add(new ObjectAttribute(ObjectAttribute.CKA_ISSUER, cert.Issuer));
certTemplate.Add(new ObjectAttribute(ObjectAttribute.CKA_SERIAL_NUMBER, cert.SerialNumber));

CryptokiObject certificate = session.Objects.Create(certTemplate);
session.Logout();
session.Close();

CryptokiCollection xx = session.Objects.Find(certTemplate, 10) ;
int xxc = xx.Count;

#endregion

in this code , xxc = 1 only if i call : CryptokiObject certificate = session.Objects.Create(certTemplate); , the next time if i didn't call it it counts 0 :(

why

but windows it self tells me when i try to login that the token "Have no valid certificates"

my certificate is not expired , so it means token have 0 certificate although i added it many times

do i have to login to token as "SO ( security office)" to add certificate ??? or is there any prerequisite needed to add certificate

and do i have to add certificate before use generatekeypair ?

thanks for your help a lot sir , you gave me great help in my questions

ooooh , here is a part i cant get

i do get the certificate from a .pfx file , reading it as x509 cert and try to create it as an object using CreateObject method

shouldn't this be the way i do create the certificate in the token ??

and about windows reading the certificate , i had a token before this ( the same model ) the windows did identified that it have certificate but i had no pin , does doing this require special template for the certificates ?

by the way Ugo Chirico , you are a real tresure for security programming information , thanks alot my dear friend