Well looks like having secure boot on was the culprit for getting to 9.1.3129 via Merlin. Other q about the mitigation status still stands though. : )
However, the problem with the smart cards still exists on 9.1.3129 w/ WMS 3.3.1. I do not see 3.3.276 on the Dell web site for WMS though so can’t try that.