Applies to: All versions of Centrify DirectControl
Question:
What is the definition of the
sctool command and some of its options?
Answer:
Most frequently used options:
sctool -s | To see the current [s]tatus of sctool (Whether smart card support is enabled or not). |
sctool -e | To [e]nable smart card support |
sctool -D | This command [D]umps out all the certificates present on the smart card along and whether their attributes match up against AD |
sctool -k | To get a new kerberos ticket similar to [k]init |
For further detail on these options, see the
sctool help by running:
man sctoolAdditional commands:
sudo rm -rf /var/db/TokenCache/tokens/*(Clears the smart card token cache of previously inserted smartcards.)
sudo sctool -r -t ocsp:none -t crl:best -p crl (Disable the OCSP check and set CRL to "Best Attempt".)
sudo sctool -r -t ocsp:none -t crl:none (Disables both OCSP and CRL checking.)
For further detail on how these commands are used in troubleshooting smart card issues, please see the following KB:
Note : Smartcard login for Mac OS 10.15 and newer Mac OS versions is not supported by Centrify