Hello,

I was tasked with getting rhel 8 workstation VMs to authenticate with our active directory using smart card. I've gotten to the point where my RHEL 8 VM is on the AD Domain, I can log in with username@domain.com and password on my RHEL, but I can't authenticate with smart card (PIV in this case). When I put the card in, it asks for a pin (doesn't show my common name), but then instantly fails after inputting. I don't have an IDM server, just my RHEL 8 VM on the domain realm.

I am able to use

• pkcs11-tool --login -O
• pkcs11-tool --test --login

and it shows my token and certs after putting in my pin.

I've copied the Root CA and intermediate CAs to /etc/sssd/pki/sssd_auth_ca_db.pem

Here's a link to my sssd.conf, krb5.conf, and authselect.

I've read through the RHEL 8 articles about SSSD and smart card, but I'm kinda new to RHEL. If anyone can point me to any articles that accomplishes this, or has any advice that would be greatly appreciated.