To Enable Smartcard Usage (Command Line)

Do the following to enable Solaris Smartcard usage on a system. A user must use an accepted smart card for the system and might need to type a PIN to successfully log in to this system after the desktop is enabled for Smartcard.

1. Become superuser on each system to be used in Smartcard operations.

2. Stop the desktop.

   # /etc/init.d/dtlogin stop

3. Turn on Solaris Smartcard operations.

   # smartcard -c enable

4. Restart the desktop.

   # /etc/init.d/dtlogin start

   ---

   Note –

   When CDE is configured for Smartcard login, /etc/pam.conf is modified to include pam_smartcard. For example, when smartcard -c enable is executed, the following lines are inserted at the top of the auth stacks for dtlogin and dtsession:

   dtlogin auth requisite pam_smartcard.so dtsession auth requisite pam_smartcard.so

   ---