This requirement only applies to components where this is specific to the
function of the device or has the concept of an organizational user (e.g.,
VPN, proxy capability). This does not apply to authentication for the
purpose of configuring the device itself (management).
Add or update the following line in /etc/pam.d/common-auth
,
placing it above any lines containing pam_unix.so
:
auth [success=2 default=ignore] pam_pkcs11.so
For general information about enabling smart card authentication, consult
the documentation at: