When prompted, pick the PIV / Authentication cert, not the EMAIL cert

1. In the certificate picker, pick the certificate WITHOUT the word 'EMAIL' in its name. 2. On Windows 10, click 'More choices' to expand the list if needed. 3. On Windows 11, look for the entry whose details say 'Smart Card Logon'. 4. The correct cert's NT Principal Name shows your 10-digit DoD ID followed by 6 more digits.