The “Invalid PIN code” error occurs when trying to issue a Gemalto IDPrime MD smart card, to create a certificate request or to write a certificate to device.
However, user and administrator PIN codes are correct (including default values), since it is possible to login to the card as user or administrator in SafeNet Authentication Client.
If user PIN code is correct, then the error is caused by mini-driver version for operating system the device is issued in. The error can be reproduced at workstations under Windows 10 1809 build 17763.195, mini-driver version of 126.96.36.199.
Update the mini-driver for Gemalto ID Prime smart cards. No error appears under Windows 10 with mini-driver version of 10.2.120.0.
Mini-driver can be downloaded from Windows Update catalogue. To install the driver, unpack the .cab file with suitable archiver, right-click the installation package, then click Install in the context menu: