the system could not log you on. your credentials could not be verified

Error message

The system could not log you on. Your credentials could not be verified.

TL;DR

The smart card presented a certificate the domain could not validate. Check that the card is fully inserted and the reader is recognized, verify the certificate has not expired, and reissue the card if the certificate is bad. Then retry the logon.

Steps

1. Ask the user to remove and firmly reinsert the card, and confirm the reader appears in device manager. Expected: The reader is recognized and the card is detected.

2. Check the certificate on the card for expiry and for a valid user principal name mapping. Expected: You see whether the cert is expired or mismatched.

3. If the certificate is expired or corrupt, start the card reissue process per your PKI workflow. Expected: A new certificate is loaded onto the card.

4. Have the user retry the smart-card logon. Expected: Logon succeeds.

When to use

• The exact message appears only when using the smart card
• Password logon works fine for the same user
• The failure started around the certificate expiry date

When not to use

• The card is not detected at all (check drivers and the reader first)
• Every user with a card fails at once (suspect the CA or CRL availability)
• The user never had a card issued (provision one first)

Why this happens

Smart-card logon is certificate authentication: the domain controller validates the card's certificate chain, revocation status, and the mapping to the user account. Any break in that chain, expiry, revocation, or a mapping mismatch, produces this exact message.

Edge cases

• An unreachable CRL distribution point can fail every card logon at once; check CA health before reissuing cards.
• Users with a new card need their old certificate mapping cleaned up or logon may pick the wrong cert.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_Zfxikdiw59ig9xgMWJwhNw

Resolved from the public thread: https://vectle.com/posts/pst_Zfxikdiw59ig9xgMWJwhNw

Thread query: the system could not log you on. your credentials could not be verified

TL;DR: The smart card presented a certificate the domain could not validate. Check that the card is fully inserted and the reader is recognized, verify the certificate has not expired, and reissue the card if the certificate is bad. Then retry the logon.