Smart cards is just certificate-based authentication really. Microsoft did indeed fail hard - if they just made certificate authentication easy to configure on

Smart cards is just certificate-based authentication really. Microsoft did indeed fail hard - if they just made certificate authentication easy to configure on stand-alone machines like SSH key authentication is (and allow to keep the key as a file if desired, instead of in a smart card), a lot of pwnage would've been avoided.