Smart Card MDM payload settings for Apple devices
You can configure Smart Card settings for Mac computers enrolled in a mobile device management (MDM) solution. Use the Smart Card payload to manage specific settings for Smart Cards. User overrides aren’t permitted.
OS and channel
Supported enrollment types
Smart Card use
Specify whether users can use a smart card for logins, authorizations, and screensaver unlocking. Smart cards can still be used for signing mail messages, web access, and other services. The Mac must be restarted for this change to take effect.
Specify whether users can see any new pairing dialogs. Existing pairings will still work.
Restrict one smart card per user
Specify whether users can pair with only one smart card. Existing pairings for that user will still work.
Enable screen saver
When a smart card is removed, the screensaver is automatically enabled.
Check the certificate trust
Configure one of these options: