When trying to enroll for a certificate on a hardware token, the enrollments will fail.
If you are running MacOS Catalina you will need to enable TokenD in the system.
To do that you will need to run the following command with Admin rights:
sudo defaults write /Library/Preferences/com.apple.security.smartcard Legacy -bool true
After running the command, test another enrollment with the token inserted.