Smart Cards Diagnostics Hub

Smart Card Reader & PIV Diagnostics

Smart-card failures span four layers: reader, card OS, minidriver/PKCS#11, and signing application. We work top-down through each layer and isolate the exact handoff that breaks.

Symptoms we triage

  • Reader present but card not detected
  • Certificates not visible to Windows Hello / signing app
  • PIN prompt rejected even with correct PIN
  • Smart card service stops repeatedly
  • macOS does not pair card with Keychain

Diagnostic flow

  1. 1. Verify reader at OS layer

    certutil -scinfo

    Expected: Reader and card surface, ATR shown

  2. 2. List PIV identities (macOS)

    sc_auth identities

    Expected: Card certificates listed with hashes

  3. 3. Confirm signing app sees certificates

    Expected: Cert appears in DocuSign / Acrobat selection dialog

OS coverage

Windows 10 / 11

  • Smart Card service (SCardSvr) state
  • Minidriver enumeration
  • Group Policy smart-card removal behaviour

macOS Sonoma / Sequoia

  • sc_auth identities listing
  • SmartCardServices logs
  • CryptoTokenKit token introspection

Smart Cards troubleshooting library

In-depth diagnostic write-ups for each common Smart Cards failure mode.

Frequently asked

Do you support government PIV / CAC cards?

We diagnose middleware-level interaction only; identity issuance and policy questions stay with the issuing authority.

Ready for a structured Smart Cards diagnostic?

Independent consulting, screen-shared Zoom session, written remediation summary.