Verifying smart card configuration

After enabling smart card support, as described in Configuring smart card login, do the following to verify that a smart card is working:

1. Verify that the user is enabled for the zone the Mac computer has joined.

   On the Windows computer, open Activity Directory Users and Computers or the Access Manager console and view the Centrify Profile for the user. Verify that the user has a profile and is assigned to a role in the zone to which the Mac computer is joined.

2. On the Mac computer, Click Utilities > Keychain Access.

   

3. Insert the smart card into the reader and the keychain for the smart card certificate appears in the Keychains window, whose name is in the form, CardProfile-CardNumber, for example, CAC-4190-6145-7ACC-2122.

   If the new keychain does not appear, quit and restart Keychain Access.

4. Double-click the certificate for the user in the right-hand pane, for example, test user 3.

5. Scroll to find the NT Principal name; for example:

   NT Principal Name tuser3@myDomain.com

   The NT Principal name in the certificate should match the UPN in Active Directory.