7.4. Configuring your system to enforce smart card authentication

• with-smartcard — enables smart card authentication in addition to password authentication
• with-smartcard-required  — enables smart card authentication and disables password authentication

Prerequisites

• Smart card contains your certificate and private key.
• The card is inserted into the reader and connected to the computer.
• The authselect tool is installed on your local system.

Procedure

• Enter the following command to enforce smart card authentication:

  # authselect select sssd with-smartcard with-smartcard-required --force

  注意

  Once you run this command, password authentication will no longer work and you can only log in with a smart card. Ensure smart card authentication is working before running this command or you may be locked out of your system.