Setting up your environment using the Subject Alternative Name - Other Name field

The user has a token that supports the Read Username from Smartcard feature.

The user wants to log on as User2, which is the Drive Encryption user name.

The user wants to poll the Subject Alternative Name - Other Name field on the certificate. The user name that the user wants to log on as (User2) resides in the Subject Alternative Name - Other Name field on the certificate (for example, Other Name: Principal Name=User2@domain.com).

Under ePO - On-prem Logon Product Settings, the user should select Subject Alternative Name - Other Name as the certificate field that contains the user name.

Because the user wants to match only the user name from the certificate field, and not the whole certificate field, select Match certificate username field up to @ sign.

The user should check their EE LDAP Sync Task User Name attribute field in ePO - On-prem. In this situation, the default samaccountname is the correct field to use because this contains the Drive Encryption user name User2, which the user normally logs on with, and this field can be found on the certificate field Subject Alternative Name - Other Name.

Finally, the user should run their DE LDAP Sync TasePOk, and synchronize their product policy onto the system they wish to use the Poll Card feature on.