Yubico Forum

Re: Mac Sierra - removing previously created PIV tokens

2016-10-19T16:38:49+01:00

No, the PIV Manager is only used for editing the NEO or YubiKey 4. We have no interest in trying to integrate it to handle managing Apple applications.

There are also other alternatives to this. If you don't want Sierra to prompt you to pair a smart card at all (this will work for ANY smart card inserted that contains a valid certificate), you can simply run:

sc_auth pairing_ui -s disable (can be re-enabled at any time with sc_auth pairing_ui -s enable)

Statistics: Posted by ChrisHalos — Wed Oct 19, 2016 4:38 pm

Re: Mac Sierra - removing previously created PIV tokens

2016-10-19T02:33:12+01:00

Can this be added to the GUI tool?

Statistics: Posted by Chrontius — Wed Oct 19, 2016 2:33 am

Re: Mac Sierra - removing previously created PIV tokens

2016-09-23T07:19:34+01:00

To unpair users from smartcards on macOS Sierra, the sc_auth command line tool should be used.

Examples:

To list all smartcard hashes for user:

sc_auth list [username]

To unpair a smart card for user:

sc_auth unpair -h [hash]

To unpair all smartcards for user:

sc_auth unpair [username]

For full documentation:
man sc_auth

Statistics: Posted by ChrisHalos — Fri Sep 23, 2016 7:19 am

Mac Sierra - removing previously created PIV tokens

2016-09-22T15:33:44+01:00

Hello,

I have been testing the new feature in Sierra to leverage PIV token login for authentication. I have wiped the token several times, therefore I am assuming that there are references to the prior tokens somewhere in the keychain.

I cannot locate where the linkage is between the Yubikey token and the authentication chain on Sierra so I may delete the old tokens.

Can someone point me in the right direction?

Statistics: Posted by shellprompt — Thu Sep 22, 2016 3:33 pm