The Workstation Only Login functionality encrypts the password used to log in to the Windows local account and stores it in the registry. The password is encrypted by using a 128-bit AES key generated by using the private key on the smart card. This should be a consideration when choosing whether to use the Workstation Only Login functionality.