(SQL Server) Load Certificate from Smart Card by Common Name

See more Certificates Examples

This example requires Chilkat v9.5.0.87 or greater. It uses a Windows-only function named LoadFromSmartcard.

This example loads a certificate specified by its subject common name (CN part of the Subject). The LoadFromSmartcard method will examine the connected smart cards and USB tokens and will find and load the certificate having the specified CN.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @sTmp1 nvarchar(4000)
    -- This example requires the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @cert int
    -- Use "Chilkat_9_5_0.Cert" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Cert', @cert OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    -- If you know the smart card PIN, set it prior to loading from the smartcard/USB token.
    EXEC sp_OASetProperty @cert, 'SmartCardPin', '12345678'

    -- To load the certificate specified by CN, pass the string "CN=<subjectCN>".  For example:
    DECLARE @success int
    EXEC sp_OAMethod @cert, 'LoadFromSmartcard', @success OUT, 'CN=Ch application signature (8c9be8e0-5544-4cd0-9062-290fbff353a7)'
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @cert, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0

        PRINT 'Certificate not loaded.'
        EXEC @hr = sp_OADestroy @cert
        RETURN
      END


    EXEC sp_OAGetProperty @cert, 'SubjectDN', @sTmp0 OUT

    EXEC sp_OAGetProperty @cert, 'SerialNumber', @sTmp1 OUT
    PRINT 'Found: ' + @sTmp0 + ' serial=' + @sTmp1

    -- Here's another example:
    DECLARE @cert2 int
    -- Use "Chilkat_9_5_0.Cert" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Cert', @cert2 OUT

    EXEC sp_OAMethod @cert2, 'LoadFromSmartcard', @success OUT, 'CN=yubikey rsa 1024 authentication'
    IF @success = 0
      BEGIN
        EXEC sp_OAGetProperty @cert2, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0

        PRINT 'Certificate not loaded.'
        EXEC @hr = sp_OADestroy @cert
        EXEC @hr = sp_OADestroy @cert2
        RETURN
      END


    EXEC sp_OAGetProperty @cert2, 'SubjectDN', @sTmp0 OUT

    EXEC sp_OAGetProperty @cert2, 'SerialNumber', @sTmp1 OUT
    PRINT 'Found: ' + @sTmp0 + ' serial=' + @sTmp1

    EXEC @hr = sp_OADestroy @cert
    EXEC @hr = sp_OADestroy @cert2


END
GO