How to Set Up a MacBook with a Smart Card Reader

The latest version of the macOS, Sierra, has introduced significant changes to the way keychain passwords are handled in the Secure Integrity Protection (SIP) area of the operating system. This means that assigning a user a randomized temporary password that can be replaced by their PIV card pin when enforcement is re-enabled is no longer possible.

When implementing Smart Card enforcement for a user, the system changes the way passwords are handled in the Sierra OS keychain. Unfortunately, this version of the Playbook does not cover methods to temporarily un-enforce and re-enforce a PIV-enabled user.

Temporary Un-Enforcement and Re-Enforcement

One known issue is that it's not possible to temporarily un-enforce and re-enforce a PIV-enabled user in Sierra OS. This means that users who require Smart Card enforcement for their MacBook should have the smart card pairing process completed as soon as they log in.

Smart Card Pairing Process

To pair your smart card with your account, follow these steps:

1. Insert your smart card reader into a USB port on your MacBook.

2. Open the Terminal window and enter the following command with elevated privileges: `sudo security authorizationdb smartcard status`

3. The system should now be enabled for Smart Card services.

4. Next, enable Smart Card services by entering the following command: `sudo security authorizationdb smartcard enable`

5. Once you've enabled Smart Card services, create a Managed Mobile profile for your user and have them set an account password.

System Requirements

To use Smart Card enforcement on your MacBook, you'll need:

* A Mac iMac or MacBook that is from 2010 or newer

* At least a Core 2 Quad processor (i5/i7 processor recommended)

* macOS Sierra (10.12.3) or later

In conclusion, setting up a MacBook with a Smart Card reader requires careful attention to the changes introduced by Sierra OS. By following these steps and ensuring that your system meets the minimum requirements, you'll be able to implement Smart Card enforcement for secure authentication.

Macbook smart card reader