Provides information about setting up your Microsoft Active Directory domain and Active Directory Certificate Services (ADCS) to enable certificate enrollment including enroll on behalf of and auto-enrollment for user login on Windows systems using the YubiKey as a smart card.  It also covers creation of a per device PIN Unlock Key (PUK) in the event a user forgets or incorrectly enters their PIN.

Date Published: October, 2017

Applies To: YubiKey 4, YubiKey 4 Nano, YubiKey 4C, YubiKey 4C Nano, YubiKey NEO, YubiKey NEO-n

Download: YubiKey Smart Card Deployment Guide

in DocumentationYubiKey Smart Card (PIV Compatible)