# Ipa-server and DoD CAC authentication **URL:** \ **Category:** Rocky Linux Help & Support\ **Created:** [January 10, 2022, 6:40pm UTC](https://forums.rockylinux.org/t/ipa-server-and-dod-cac-authentication/5085 "2022-01-10T18:40:40Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![BiloxiGeek](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/biloxigeek/32/1774_2.png) [@BiloxiGeek](https://forums.rockylinux.org/u/BiloxiGeek)\ **Post date:** [January 10, 2022, 6:40pm UTC](https://forums.rockylinux.org/t/ipa-server-and-dod-cac-authentication/5085/1 "2022-01-10T18:40:40Z")
Anyone gotten an ipa server setup to use DoD common access cards for authentication? I have a new domain setup, four replica servers, all are providing domain and CA services. I haven’t found the the right set of steps to get a CAC login on any of the clients yet. ---
**Author:** ![label](https://avatars.discourse-cdn.com/v4/letter/l/c5a1d2/32.png) [@label](https://forums.rockylinux.org/u/label)\ **Post date:** [January 11, 2022, 8:27am UTC](https://forums.rockylinux.org/t/ipa-server-and-dod-cac-authentication/5085/2 "2022-01-11T08:27:34Z")
From what I’m understanding, a CAC card is a smart card. I believe the same setup that’s required for smart cards in FreeIPA should technically apply to a CAC card. I would [review this](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/managing_smart_card_authentication/index) to get yourself started. All it really should come down to is the card has certificates issued by FreeIPA associated with the user. Using these steps and [this page](https://www.freeipa.org/page/Using_Yubikey_4_Nano_to_authenticate_to_FreeIPA_enrolled_host) I was able to setup my yubikey for smart card auth in my own environment. ---
**Author:** ![brian](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/brian/32/5777_2.png) [@brian](https://forums.rockylinux.org/u/brian)\ **Post date:** [August 25, 2023, 3:57am UTC](https://forums.rockylinux.org/t/ipa-server-and-dod-cac-authentication/5085/3 "2023-08-25T03:57:40Z")