---
title: "Enable a Smart Card Logon"
slug: "enable-a-smart-card-logon"
updated: 2023-05-05T19:40:20Z
published: 2023-05-05T19:40:20Z
canonical: "docs.axiad.com/enable-a-smart-card-logon"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.axiad.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enable a Smart Card Logon

Smart card logon does not work out of the box with Microsoft Active Directory. The PKI enablement of a Microsoft domain is performed in three main steps:

1. Publication of necessary Certification Authority certificates to the domain.
2. Availability of the Certificate Revocation Lists to the Domain Controllers and every machine on the network, servers included.
3. Creation or verification of Kerberos authentication certificates for every DC in the domain.

## Logon Process

| **Overall** ![logon_overall](https://cdn.document360.io/eaa8d9cb-3eef-4690-8447-5bcaa4f4afb2/Images/Documentation/logon_overall.png) | **Machine and Domain Controller interaction** ![logon_machine](https://cdn.document360.io/eaa8d9cb-3eef-4690-8447-5bcaa4f4afb2/Images/Documentation/logon_machine.png) |
| --- | --- |

##