Using a Smartcard (PIV or CAC) with Ansible
As part of the Ansible 2.12 release, pkcs11/smartcards are now supported by Ansible. Now you can use smartcards and other devices that support pkcs11 (Yubikey) to configure systems with Ansible.
Setup your middleware for pkcs11, below is how to install opensc on a Mac using homebrew.
$ brew install opensc To use pkcs11 for authentication set the ANSIBLE_PKCS11_PROVIDER environment variable
$ export ANSIBLE_PKCS11_PROVIDER=/usr/local/lib/opensc-pkcs11.so $ ansible-playbook -u USERNAME -b -k -K PLAYBOOK.
