The Smart Card Daemon
In Ubuntu Linux, the pcscd (Personal Computer Smart Card Daemon) service is installed by default as part of the broader system security architecture. Its purpose is to manage connections to physical Smart Card readers. This is the technology used when an enterprise environment requires employees to insert a physical cryptographic ID card (like a CAC or PIV card) into a USB reader to log into the machine, sign emails, or authenticate VPN connections.
While this daemon is absolutely essential for government or high-security corporate deployments, it is completely useless on a standard personal laptop, a home media server, or a cloud-based VPS. If you do not own a physical smart card reader, running pcscd in the background is a waste of system memory. Furthermore, on some Ubuntu versions, an idle pcscd process has been known to continuously poll USB ports, occasionally causing high CPU usage spikes or interfering with other USB devices. To streamline a standard PC, you should disable it.
How to Disable the Pcscd Service
Because the service is socket-activated (meaning it can be woken up by other processes requesting it), you must disable both the service and its listening socket.
Warning: Do not disable this if you use a YubiKey for GPG smartcard authentication, as GnuPG often relies on pcscd to communicate with the hardware key.
- Open your Ubuntu Terminal or connect via SSH.
- First, stop the service and its associated socket if they are currently active:
sudo systemctl stop pcscd.service
sudo systemctl stop pcscd.socket- Disable them so they do not attempt to start during the boot sequence:
sudo systemctl disable pcscd.service
sudo systemctl disable pcscd.socket- To ensure that absolutely no other security application can force the daemon to start, mask both the service and the socket:
sudo systemctl mask pcscd.service
sudo systemctl mask pcscd.socketYour Ubuntu system will no longer monitor your USB ports for smart card insertion events, freeing up a small amount of system resources.