Big Sur - Allow Smartcard Authentication

Information

Smartcard authentication _MUST_ be allowed.

The use of smartcard credentials facilitates standardization and reduces the risk of unauthorized access.

When enabled, the smartcard can be used for login, authorization, and screen saver unlocking.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.security.smartcard:
allowSmartCard:
True

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2(1), 800-53|IA-2(2), 800-53|IA-2(12), CCE|CCE-85277-2

Plugin: Unix

Control ID: 893adf06e9ee0cd6b640d207648fc189a6ec31b46b5d7fcf8c6a03df910febbb