An administrator can grant permanent consent for all users (non-admin) to create virtual smart cards in the Smart ID Desktop App. The permanent consent is achieved by creating a scheduled task called CreateVSC.

The CreateVSC task is created when:

• you install the app with the parameter allowcreatevsc=true as described in Install and upgrade Smart ID Desktop App.
  or
• by using the toggle button Grant permission to create VSCs as described in Do advanced settings in Smart ID Desktop App.

1. To inspect the actions performed by the CreateVSC task, use the following powershell script (requires elevation): 

#get the particular task
$task = Get-ScheduledTask -TaskName CreateVSC
 
#get the action which is encoded as base64 string
$base64 = $task.Actions[0].Arguments -split " " | select -last 1
 
#decode it and save the script as CreateVSC.ps1
$bytes = [Convert]::FromBase64String($base64)
[System.Text.Encoding]::Unicode.GetString($bytes) > CreateVSC.ps1

1. If the CreateVSC task is present, any user (admin rights not required) can create a virtual smart card in Powershell using the following command:
   

   Create VSC in powershell

   [System.Diagnostics.EventLog]::WriteEntry("Nexus","CreateVSC",[System.Diagnostics.EventLogEntryType]::Information,1)
    
   #or alternatively
    
   Write-EventLog -Source Nexus -ID 1 -Message CreateVSC -LogName application

To verify that the CreateVSC task is present if you do not have admin rights:

• Open the Smart ID Desktop App, go to Advanced settings and make sure that the Grant permission to Create VSCs toggle button in set to Granted.
  or,

• Use the following powershell script to ping the scheduled task:

  Ping the scheduled task

  [System.Diagnostics.EventLog]::WriteEntry("Nexus","CreateVSC",[System.Diagnostics.EventLogEntryType]::Information,1,0,1)
  sleep 3
  $event = Get-WinEvent -ProviderName Nexus -MaxEvents 30 | where {$_.id -eq 16 -and $_.TimeCreated.AddSeconds(100) -ge $now } | select -First 1
  if ($event -eq $null)
  {
      "Task CreateVSC not installed"
  }
  else
  {
      $event.Properties[0].Value
  }

1. Use the following command to verify that the app was provisioned correctly:

   Verify provisioned package

   Get-ProvisionedAppxPackage -Online | Where {$_.PackageName -match "nexustechnology"}

2. The command will return the provisioned package (if the package was provisioned correctly).

If you cannot launch the Smart ID Desktop App, try to reinstall it using powershell as admin user:

Get-AppxPackage -AllUsers *nexustechnology* | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register  "$($_.InstallLocation)\AppXManifest.xml"}