Hi
Welcome to Centrify Community!
Could you try the following steps and see if it helps?
CAC and CACNG tokend must be removed.
The following steps needs to be done on the Centrified Mac as root or sudo:
1) #cd /System/Library/Security/tokend/
2) #sudo mkdir tmp
3) #sudo mv CAC* tmp/
4) The Smart card must be removed and re-inserted again.
5) Keychain Access must be opened. The card should appear as "PIV-*".
6) site.mail.xxx web site should be accessible now.
a) (If using Safari browser, the credential association must be removed for site.mail.xxx, so that the right certificate can be selected.)
Note: In case, if customer wants to revert back to CAC profile, they have to undo the changes to tokend as follows:
1) cd /System/Library/Security/tokend/
2) sudo mv tmp/CAC* .
Thanks.
Sharon