If a user initiates a log out and removes their smart card, but then clicks the Cancel button in the log out confirmation dialog, the screen will not lock when the smart card is removed.
Workaround: Choose one of the following workarounds.
Turn off the Logout Confirmation Dialog in the Startup Style Manager.
If the screen does not lock when the smart card is removed the user should log out and log in. The session will be restored and the screen will lock when the smart card is removed.
If you change the smart card authentication defaults and the PIN authentication mechanism is not included, access to the smart card is denied. Subsequent authentication mechanisms are inaccessible and the smart card user cannot login.
Do not modify the default authentication settings.
If you modify default authentication settings, you must include and configure the PIN authentication mechanism.
If ocfserv terminates and the display is locked, the system remains locked even when a smart card is inserted or removed.
rlogin to the machine on which the ocfserv process terminated.
Kill the dtsession process by typing the following in a terminal window.
% pkill dtsession
The Edit Config File menu item in the Smart Cards Management Console does not edit smart card configuration files located in /etc/smartcard/opencard.properties. If the menu item is selected a warning is displayed that indicates not to continue unless requested by technical support.
Workaround: Do not use the Edit Config File menu item in Smart Cards Management Console. For information on smart card configuration, see Solaris Smart Cards Administration Guide.