I have a Yubikey 5 NFC and I am trying to configure it on a test bench for windows login authentication. I cannot seem to get the certificate to enroll on the Yubikey. I have followed the Yubikey Smartcard deployment guide, but does not seem to be working as expected.
So far, I have:
- Created Domain Controller (Windows Server 2012 R2) and configured it with Active Directory, and Certificate Authority
- I created a Windows 10 workstation and connected it to the domain controller
- Configured CA for smartcard authentication
- Confirmed the Smartcard mini driver is installed on the Windows 10 correctly
- Created a smartcard login template for self enrollment
- Published the template and added it to the GPO 'default domain policy'
When I login to the Windows 10 machine as a new user, it prompts the user to configure a certificate. The Enroll certificate wizard creates and issues the certificate to MMC --> Console Root --> Certificates - Current User --> Personal --> Certificates
It does not ask for a Yubikey PIN and it just completes the setup wizard. I cannot seem to get the certificate to go to the Yubikey. I've tried a workaround where I export the certificate and private key and then manually add it to a slot on the Yubikey, but when I plug it into the Windows 10 machine, I get an error when trying to login with smartcard saying "No valid certificates were found on this smartcard. Please try another smartcard or contact your administrator".
Any help or guidance would be greatly appreciated!
