Introduction

MacOS (10.13 and above) includes native support for Personal Identity Verification (PIV) cards provisioned with X.509 digital certificates, which can be used to open your session (local or to Kerberos domain), unlock keyChain or authenticate to a website. Smart cards and YubiKeys issued by Axiad comply with this PIV standard.

What Does this Guide Do?

This guide provides detailed instructions on how to configure your macOS device to:

1. connect to Axiad Conductor’s Unified Portal, to issue your device(s) and manage their lifecycle (reset PIN, update X.509 certificates, reset OTP counter, etc..)
2. enable X.509 authentication using a smart card or a YubiKey

Supported Platforms

• macOS High Sierra (10.13) and higher
• Google Chrome/ Microsoft Edge Chromium
  1. Terminology

Identity Device Terminology

• Connected devices: Devices which you can use for PKI/certificate-based authentication (smart cards, YubiKeys, etc.) and potentially FIDO or OTP-based authentication (YubiKeys).
• Smart card: In this guide, the term is used on a broad sense to cover X.509 capable secure portable credentials in either credit card format (PIV like card), as well as YubiKeys.