Smart Card Setup

The setup for PKI and smart cards is the most involved out all of the authentication methods. This setup and configuration requires an Active Directory Certificate Service (Certificate Authority—"CA") if you do not already have one installed in yo...

Here we'll be creating the "Managed Service Account" which will have the necessary permissions needed by the MFA system to connect MFA to AD. Part 1 - Create User In AD Open Active Directory and Users . Navigate to Domain > Man...

Part 1 - Duplicate Smartcard Template On your Certificate Authority server, launch the Certificate Authority tool. Expand your server's name and right-click Certificate Templates > Manage. A new window, Certificates Templates ...

Part 1 - Request Certificate Log into your MFA server as the Service Account to create a Windows profile. Run the mmc . Click on File > Add/Remove Snap-in... On the left-hand side, highlight Certificat...

Part 1 - Create Certificate Set In the MFA Admin Portal, go to the Methods tab. On the left-hand side, click Smart Card > New Certificate Set . A window will pop up to name the new certificate set will appear. Give your set a name (a d...

When setting up smart card authentication set(s), it's possible to use the default set, 'Smartcard only', but for the purpose of this article we'll be creating a custom set. This can be helpful for troubleshooting and readability when needing to d...