5.2. Enabling smart-card authentication for the web console

To use smart-card authentication in the web console, enable this authentication method in the cockpit.conf file.

Additionally, you can disable password authentication in the same file.

Prerequisites

You have installed the RHEL 10 web console.
For instructions, see Installing and enabling the web console.

Procedure

Log in to the RHEL 10 web console.
Click Terminal.
In the /etc/cockpit/cockpit.conf, set the ClientCertAuthentication to yes:
```
[WebService]
ClientCertAuthentication = yes
```
Optional: Disable password-based authentication in cockpit.conf with:
```
[Basic]
action = none
```
This configuration disables password authentication and you must always use the smart card.
Restart the web console to ensure that the cockpit.service accepts the change:
```
# systemctl restart cockpit
```