Solaris Smartcard Administration Guide

To Enable Smartcard on a System (Console)

Use this procedure to enable Solaris Smartcard on a system by using the Smartcard Console. The following must be done on each system that uses Smartcard authentication. For detailed information about Solaris Smartcard commands, see the following man pages:

Steps

Verify that the ocfserv daemon is enabled.

The following command provides the status of the service.
% svcs network/rpc/ocfserv
Note –
Before you make any changes to Smartcard, you must make sure that the ocfserv daemon is enabled.

(Optional) If necessary, as root, enable the ocfserv daemon.
# svcadm enable network/rpc/ocfserv

Select OCF Clients in the Navigation pane.

The Desktop icon is displayed in the Console pane.

Select the Desktop icon.

Choose Properties from the Action menu.

The Configure Clients dialog box is displayed.

Select the Cards/Authentications tab in the dialog box.

The supported smart cards are listed in the listbox at the left.

Select the radio button that is labeled “Activate Desktop's Smart Card Capabilities.”

As soon as you click OK in the Configure Clients dialog box, Smartcard is activated. You must have a working card reader on the system and a smart card configured with your user name and password.

Click the Apply or OK button.

Solaris Smartcard is now enabled on the system.

Exit CDE to activate the change.

Troubleshooting

If you do not know the PIN on the card, you are locked out of the system. If you cannot access your system because of Smartcard, issue a rlogin to the system and disable Smartcard. See To Disable Smartcard.

You can disable Smartcard from the Configure Clients dialog box. Select the radio button that is labeled “Deactivate Desktop's Smart Card Capabilities” and click OK.