Disabling the CryptoTokenKit Smart Card Driver

To use a third-party smart card driver, you must disable the CryptoTokenKit smart card driver on the client system.

To determine which smart card drivers are installed, type the following command on the client system.

#system_profiler SPSmartCardsDataType

To determine whether a smart card is supported by the CryptoTokenKit smart card driver, type the following command on the client system.

#security list-smartcards

To disable the CryptoTokenKit smart card driver for CAC and PIV cards, use the following command on the client system.

#sudo defaults write /Library/Preferences/com.apple.security.smartcard DisabledTokens -array com.apple.CryptoTokenKit.pivtoken

To disable the CryptoTokenKit smart card driver for Gemalto .NET cards, use the following command on the client system.

#sudo defaults write /Library/Preferences/com.apple.security.smartcard DisabledTokens -array com.gemalto.Gemalto-Smart-Card-Token.PKCS11-Token