Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Note
titleFileVault2 & Smart Card - Configuration change required!

This information is already listed on page How to activating the screen saver when a smart card is removed on macOS in section (2).

If you have already activated the screensaver working with smart card, you may disregard this information.

Currently the MacOS FileVault 2 does not support smart card usage for authentication or key storage. This requires to turn off the FileVault2 login passthrough (UserID & Password are passed from FV2 to the operating system for login).

After changing FV2 configuration and starting MacOS (cold boot) the FileVault2 will ask for your userID and password.

Thereafter (if smart card has been properly configured) the MacOS will connect to your wireless AirID reader and the smart card and will ask for the smart card PIN to log into the MacOS system.


You can turn off FV2 logon passthrough using the following command:

...

This will allow you to use your usual account password for FileVault and then the our Smart Card  to login after boot.


Content by Label
showLabelsfalse
max5
spacesPM
showSpacefalse
sortmodified
reversetrue
typepage
excerptTypesimple
cqllabel in ("kb-how-to-article","macos","ctk","cryptotokenkit") and type = "page" and space = "DEMTHSP"
labelskb-troubleshooting-article

Was this answer helpful?

Please rate & help us to improve our FAQ.

Rate