This guide applies to customers encountering "Domain Controller Issuing Certificate has not been installed" errors when using smartcard. In order for the device to validate that the Domain Controller is authorized to provide validation, the issuing Intermediate Authority Certificate of the Domain Controller needs to be loaded first.
If you do not have this certificate, it can be extracted from Internet Explorer. The certificate needed by the device must be in Base64 format although the extension type of the file itself is irrelevant.
Solutions: Smart Common Access Card (SCAC), Public Key Infrastructure (PKI)