.

How to Remove Centrify Express

Go to:

 Hard disk / Applications / Utilities / Centrify /

Double click:  SmartCardTool or SmartCardAssist

Select "Uninstall" from the Centrify Express for Smart Card window

Also follow this section to remove .tokend files

.

How to Remove ActivClient for Mac

Go to:

 Hard disk / Applications / Utilities

Double click:  ActivID ActivClient for Mac Uninstaller

Select "Uninstall" from the ActivID ActivClient for Mac Uninstaller screen 

ActivClient for Mac users must also remove the "acpkcs220.dylib" file

All Programs listed above may also have files located here (except for ActivClient):

Mac OS X 10.5.x - Mac OS X 10.10.x,  10.11.x and newer look below

Go to:

 Hard disk / System / Library / Security / tokend /

Delete "BELPIC.tokend", "CAC.tokend", "CACNG.tokend", "CSSI.tokend", "OpenSC.tokend", "JPKI.tokend", "ac.ac4mac.token", "PIV.tokend", and / or "PKCS11.tokend" files

Sometimes a few other files need to be removed, they are found in:

Delete "BELPICViewerPlugin.bundle", "CACViewerPlugin.bundle", and / or "PIVViewerPlugin.bundle" files

NOTE:  If you can't delete them, skip them and follow next step.

Mac OS X 10.11.x and newer systems

Go to:

Hard disk / Library / Security / tokend /

Delete "BELPIC.tokend", "CAC.tokend", "CACNG.tokend", "CSSI.tokend", "OpenSC.tokend", "JPKI.tokend", "PIV.tokend", and / or "PKCS11.tokend" files

ActivClient for Mac systems

Go to:

Hard disk / Library / Frameworks / ac.ac4mac.pkcs11.framework / Versions / Current / Libraries/

Delete "acpkcs220.dylib"

Mojave (10.14.x), High Sierra (10.13.x), and Sierra (10.12.x) Built in Smart Card Ability

DO NOT DISABLE on 10.15.x, 11.x.x, or 12.x.x and newer, as there is NO alternative

NOTE: Mojave, High Sierra, and Sierra have a "built in Smart Card ability" that works for 'some' people 'some' of the time.  To use your CAC "more consistently" I recommend you install a 3rd party CAC enabler, such as CACKey or PKard.  This section shows you how to disable the built in smart card ability found on Mojave, High Sierra, and Sierra.

NOTE2: Doing this will remove the ability to login to your computer with your CAC, and will require you to install a 3rd party CAC enabler such as CACKey or PKard.

1. Remove your CAC from the reader

2. Open Terminal, by typing Terminal in the spotlight search

3. Copy the command below [starting with sudo, and ending with pivtoken] and paste it into the terminal window (or manually retype it)

sudo defaults write /Library/Preferences/com.apple.security.smartcard DisabledTokens -array com.apple.CryptoTokenKit.pivtoken

3a. I recommend you run this command twice.

4. When prompted for your computer password, know that the cursor will not move, type it in, and hit enter to process.

5. After that it should be disabled.  Logout of Terminal, restart computer, and try again

NOTE3: If you have recently updated your Mac OS, you may need to re-enable the built in Smart Card ability after removing all installed enablers listed above:

1. Remove your CAC from the reader

2. Open Terminal, by typing Terminal in the spotlight search

3. Copy the entire command below [starting with sudo, and ending with pivtoken] and paste it into the terminal window (or manually retype it)

sudo defaults write /Library/Preferences/com.apple.security.smartcard DisabledTokens -array && sudo defaults write /Library/Preferences/com.apple.security.smartcard EnabledTokens -array com.apple.CryptoTokenKit.pivtoken

3a. I recommend you run this command twice.

4. When prompted for your computer password, know that the cursor will not move, type it in, and hit enter to process.

5. After performing these steps, the built in smart card ability should be enabled. 

6. Logout of Terminal,

7. Restart computer

8. When prompted to Pair your Smart Card with your computer, you can select Pair, or Cancel.  If you elect to pair, you will have an additional option to utilize your CAC and PIN to access your computer [when the CAC is in the reader].  If the CAC is not in the reader, you can still use your fingerprint, or username/password option. 

NOTE:  Pairing your CAC to your login increases the possibility of blocking your CAC, which would then require you to visit an ID card office to get it unblocked. 

How to UNPAIR your smart card