When trying to enroll for a certificate on a hardware token, the enrollments will fail.
If you are running MacOS Catalina you will need to enable TokenD in the system.
To do that you will need to run the following commnad with Admin rights;
sudo defaults write /Library/Preferences/com.apple.security.smartcard Legacy -bool true
After running the commnad, test another enrollment with the token inserted.