...
- YubiKey 4 and newer
- Yubikey Manager
- Active Directory account
- Windows domain-bound machine (necessary for Enrollment - Step 2)
- Logged in as the account that will appear on the certificate
Account is member of CLAWS managed group its-certs-smartcard (once added, you need to logout and login after to be part of the group).
Note Find someone on Systems or IA team
...