This information is already listed on pageĀ How to activating the screen saver when a smart card is removed on macOS in section (2).

If you have already activated the screensaver working with smart card, you may disregard this information.

Currently the MacOS FileVault 2 does not support smart card usage for authentication or key storage. This requires to turn off the FileVault2 login passthrough (UserID & Password are passed from FV2 to the operating system for login).

After changing FV2 configuration and starting MacOS (cold boot) the FileVault2 will ask for your userID and password.

Thereafter (if smart card has been properly configured) the MacOS will connect to your wireless AirID reader and the smart card and will ask for the smart card PIN to log into the MacOS system.

You can turn off FV2 logon passthrough using the following command:

defaults write /Library/Preferences/ DisableFDEAutoLogin -bool YES

This will allow you to use your usual account password for FileVault and then the our Smart CardĀ  to login after boot.

Related Articles

Related articles appear here based on the labels you select. Click to edit the macro and add or change labels.

Was this answer helpful?

Please rate & help us to improve our FAQ.