For an IT security demonstration I want to set up a small demo PKI including smart card authentication based on certificates generated by a Certificate Authority, using a class 3 pin pad reader. For accessing the reader I want to use OpenCS, also because I want to make additional use of it for disk encryption with LUKS.
I have found readers with pin pads which seem to be supported by OpenCS or offer related drivers, however smart cards seem to be problematic as the information given by vendors is always not very specific regarding PKI. I have been unable to identify a clear standard for smart cards supporting this scenario which would allow me to find suitable products, especially usable pairs of readers and cards. While I have found ISO 7816 of which sections -4 and -8 seem to deal with card commands and certificate storage, I can't find any products referencing these sections; mostly ISO 7816 is mentioned in general, which is not enough as it is also valid for SLE4442 cards which are mere (secure) memory cards without any PKI functionality.
Now the question is, does a standard for this exist, or am I missing an important keyword here?
Just to make sure: I know that for good reasons requests for specific product recommendations are not appreciated here, therefore I am looking for help how to identify usable products myself.