kinit using smartcard or tpm cert for pkinit

[Huang, Peter (HP-IT Palo Alto)]

Have anyone done testing pkinit pre-auth using cert on smartcard (may be thru openssl pkcs11) or TPM?   The current instructions only detail cert on the file system but not on smartcard or tpm.    It would be nice that kinit will have a switch that access the private key on the secure devices complete the pre-auth sequence.

-peter huang
Hewlett-Packard Company
3000 Hanover Street
Palo Alto, CA 94304
Tel (650)236-3590