A user may attempt to login to Security Analytics after being issued a new CAC card. This may have a new CA attached to it. The symptoms are that the user is never prompted to select their card in the grey popup box and the authentication fails without details.
The new CA will need to be added to the system.
The new CA is missing from the client certificate bundle.
This was resolved by adding the new CA to /etc/pki/tls/certs/client-ca-