Redhat Identity Management and Smartcards
 

I'm fairly new to the idea of managing smartcards and was wondering if I had the idea right.

I've installed RedHat's IDM on my server and attached clients just fine. Users can log in and whatnot. Now I'd like to provision smartcards. I believe my next steps are:

1. Create local CA (Its an offline network)
2. Use the local CA in order to create certs to write to the new smartcards.
3. Associate those certs on the smartcards with users.

Does this sound correct?

Thank you!

You should better use USB Sticks with a key and corresponding PIN.

Smartcards can be stolen.