Error or issue
Problems with certificates on the token post-issuance.
Description
Unable to use newly issued tokens for the intended purpose.
Cause
The credential profile had been incorrectly configured in so much as the single certificate being issued was in the wrong slot (container) on the token. It should have been placed in the 9a slot (PIV Authentication) and was actually placed in the 9e slot (Card Authentication).
https://developers.yubico.com/PIV/Introduction/Certificate_slots.html
Resolution
The Credential Profile was updated to put the certificate into the correct slot and then request card updates for all the affected users. Each user then collects the update job to put the correct certificate into the correct slot.