Re: [Fed-Talk] Navy CAC Card Reader and NMCI Webmail

On May 13, 2005, at 9:54 PM, Dave Lawlin wrote:

I am attempting to log on to https://webmail.nmci.navy.mil after having acquired a CAC card reader, SCM 331, and I updated it with the latest firmware from SCM.
The computer would not recognise it until I updated the firmware on the CAC card reader. After rebooting my Powerbook the card now shows up in the keychain app when I insert it.

A colleague was able to import his PKI certificates from his CAC card and check his NMCI mail via the webmail client.

You can get a copy of the Certificate, but you can't copy/remove the keys. Keys are important for the SSL transaction using a webmail client. Sure he did not already have his Certs/Keys imported into the Keychain prior to this ? I know that the Navy, for one, was providing Soft Certs to folks who asked for it at one point.

I cannot recall my PW from years ago though it is not required for routine use of your CAC card.

The PIN to your Smart Card is required for Login Authentication, S/MIME, Secure Web Access, System Administration, .... So, I must assume that when you say "it is not required for routine use..." that you mean physical access to your building and not electronic/digital access to systems.

As an alternative I acquired a CAC card reader to access the webmail site however, I still cannot access it. The message is that I do not have a valid certificate.

If you went to a site such as https://webmail.nmci.navy.mil and previously selected another certificate, Mac OS X adds a keychain entry referencing which credential you previously selected, so that next time you reference that same site it will default to that credential. If, under 10.4.x, you are no longer asked to select a credential and you are sure that your credentials do indeed get you access to that service/site, you should be able to search for the keychain item related to that site and delete it. Try again.

OS 10.4
Have tried IE 5.2, Safari and Mozilla Firefox

- Should work as long as you Config the PKCS#11 plugin & Manage Root Certs

Safari

- Should work as noted above.

-Shawn

___________________________________________

Shawn Geddis

Security Consulting Engineer

Apple Computer - US Federal Government

References:
	>Re: [Fed-Talk] Navy CAC Card Reader and NMCI Webmail (From: Shawn Geddis <email@hidden>)
	>Re: [Fed-Talk] Navy CAC Card Reader and NMCI Webmail (From: Dave Lawlin <email@hidden>)