Red Hat Enterprise Linux 9 • Release: 7 Benchmark Date: 05 Jan 2026

CAT II V-258125 RHEL-09-611180

The pcscd service on RHEL 9 must be active.

Documentable No
Rule ID SV-258125r1045253_rule
CCI References
CCI-004046CCI-001948

Discussion

The information system ensures that even if the information system is compromised, that compromise will not affect credentials stored on the authentication device. The daemon program for pcsc-lite and the MuscleCard framework is pcscd. It is a resource manager that coordinates communications with smart card readers and smart cards and cryptographic tokens that are connected to the system.

Check Procedure

Verify that the "pcscd" socket is active with the following command:

$ systemctl is-active pcscd.socket

active

If the pcscd socket is not active, this is a finding.

Fix Action

To enable the pcscd socket, run the following command:

$ sudo systemctl enable --now pcscd.socket