yubikey/piv.md

Personalizing the YubiKey PIV application

Note: The default settings on the YubiKey PIV application are as follows:

PIN: 123456 (6-8 characters allowed, macOS requires numeric-only)
PUK: 12345678 (6-8 characters allowed)
Management Key: 010203040506070801020304050607080102030405060708

checked/tested:

pcsctest - successful
pkcs11-tool --login --test - works
pkcs11-tool --list-objects - works
system_profiler SPSmartCardsDataType - shows all the certs
sc_auth identities - lists identities
sc_auth pairing_ui -s status - enabled
security list-smartcards - lists the smartcard
security smartcards token -l - is empty
Clean install of macOS - issue still exists
Reset SMC - issue still exists

• Intro to smart card integration
• Use a smart card on Mac
• Advanced smart card options on Mac
• Configure a Mac for smart card–only authentication

Reference:

1. https://discussions.apple.com/thread/254149417?sortBy=best
2. https://support.yubico.com/hc/en-us/articles/360016649059-Using-your-YubiKey-as-a-smart-card-in-macOS