Centrify DirectControl is installed and configured to use CAC cards.
When the card is inserted and PIN is entered, the screen shakes.
There are many reasons why the might screen shake and users can't login.
One thing to check is to make sure they have the correct drivers.
Centrify ships with CAC, CACNG, PIV, and BELPIC drivers by default.
In this situation, Gemalto drivers were installed on the system as it was most likely a pre-imaged system.
Gemalto drivers will only work with some specific cards and are not compatible with others.
Check /var/log/system.log and check to see if the Gemalto drivers installed:
reader SCM SCR inserted token "First.Last.100xxxx" subservice 12 using driver com.gemalto.tokend
Once the wrong installed drivers have been determined, they can be removed using the following steps:
Login as Local Admin and bring up the Terminal
Run the command:
sudo mv /System/Library/Security/tokend/PKCS11.tokend /System/Library/Security/tokend/tokend-original
(This is all one line)
Logout and try logging in with the smart card again.