To use a third-party smart card driver, you must disable the CryptoTokenKit smart card driver on the client system.
To determine which smart card drivers are installed, type the following command on the client system.
#system_profiler SPSmartCardsDataType
To determine whether a smart card is supported by the CryptoTokenKit smart card driver, type the following command on the client system.
#security list-smartcards
To disable the CryptoTokenKit smart card driver for CAC and PIV cards, use the following command on the client system.
#sudo defaults write /Library/Preferences/com.apple.security.smartcard DisabledTokens -array com.apple.CryptoTokenKit.pivtoken
To disable the CryptoTokenKit smart card driver for Gemalto .NET cards, use the following command on the client system.
#sudo defaults write /Library/Preferences/com.apple.security.smartcard DisabledTokens -array com.gemalto.Gemalto-Smart-Card-Token.PKCS11-Token
Was this page helpful?