Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Fed-Talk] FileVault - CAC possible bug.



I wanted to post an anomaly I noticed that will probably affect federal folks the most.

I have discovered an issue with filevault and running smart card services. When FileVault has a master password set and you browse to a pki enabled web site with safari, safari asks you for your FileVault master password. When you enter it successfully it tells you that the web site will not accept it and asks you to choose a new certificate, and the inserted CAC certificate is listed. As soon as I highlight it and click OK Safari crashes, this did not occur before turning on FileVault. Removing the FileVault keychain files in / library/keychains corrects this issue (but it leaves a blank keychain. I imagine it is a problem with how FileVault stores the master password as a certificate. I have elected to just run without FileVault for now.

My configuration is as follows:
12" G4 powerbook 1.25GHZ
1.25GB RAM
SCR331 USB Card reader
Fresh 10.4 install (Erase and install)
No other applications yet, CAC/PKI functionality is paramount for me so I needed to nail down any 3rd party issues.


Scott Jones




Attachment: smime.p7s
Description: S/MIME cryptographic signature

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/fed-talk/email@hidden

This email sent to email@hidden



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.