Hi
Welcome to Centrify Community!
May we know after you plugin the Smartcard, are you able to see the Smartcard certificate under Keychain Access?
Also, have you tried the following steps and see if it's helpful for your situation:
Cleanup
- Unplug any smart cards and readers from your Mac
- Open the Centrify Smart Card Assistant Utility
- Press the Uninstall button to remove any Centrify bits off the system through the standard method
- Navigate to this folder and move or delete any remaining tokend files here:
/System/Library/Security/tokend/ (for OS X 10.10 and below)
/Library/Security/tokend/ (for OS X 10.11 and above)
- Use the following link to make sure you don't have any other smart card software installed that may be interfering with things:
http://militarycac.com/macuninstall.htm - Run the following command to remove any potentially cached smart card objects from the system as well:
sudo rm -rf /var/db/TokenCache/tokens/*
Reinstall
Note: I would recommend double-checking through all of these steps - even if you think have done them before.
- Once your system is cleaned out. Check that your CAC reader is also updated to the latest firmware available:
https://militarycac.com/macnotes.htm#see_the_reader - Download and install Express for Smart Card:
http://www.centrify.com/express/identity-service/smart-card-download/ - Make sure you have the DOD certificates imported into the Keychain: http://www.centrify.com/downloads/products/documentation/mac-smart-smartcard/1.0.0/wwhelp/wwhimpl/js...
To use the ones that come packaged with OS X, use the steps under:
- "Loading DOD intermediate certificates into the keychain"
To download them directly from the DOD PKI Management site, use the steps under:
- "Downloading certificates from the DoD PKI Management site" - Insert your smart card into the Mac and check in Keychain Access, the card should now appear correctly in there again.
- Try opening your target website in Safari, if it still doesn't work, check with an alternative browser and let us know how it goes.
Hope that helps and kind regards,
Ivan