If the card is visible in Keychain Access, select Certificates under Category in the Keychain Access window and verify that the certificate trust chains for each certificate are valid all the way up the chains. If non-default drivers are present, locate them in /System/Library/Security/tokend and use the sudo mv command to remove them. Log entries for smart card drivers appear similar to the following: reader SCM SCR inserted token 'First.Last.100xxxx' subservice 12 using driver Check /var/log/system.log to see if non-default (and possibly incompatible) drivers were installed. Other drivers, such as Gemalto, are incompatible with some cards. Server Suite ships with CAC, CACNG, PIV, and BELPIC drivers by default.

If the smart card does not appear in the Keychain window:Įnsure that the firmware of the smart card reader has been updated to the latest version.Įnsure that no other conflicting smart card drivers have been installed.

The card should appear in the Keychain Access window as another Keychain with its certificates loaded. To do so, open Keychain Access and insert the smart card into the reader.

Ensure that the Mac computer is able to recognize the smart card.

It is recommended that you retest smart card login at regular intervals (such as after each step) as you perform this procedure. The following procedures are intended to diagnose multiple causes of smart card log in failure. By performing the diagnostic procedures described in this section.By using the sctool utility as described in Using sctool.Two general methods for diagnosing smart card log in problems are provided:

Smart card reader for mac