Thread-topic: [Fed-Talk] Getting a CAC card for Macs
User-agent: Microsoft-Entourage/11.3.3.061214
Ask your DoD contacts to sponsor you for a JITC test CAC. The card won't
work with AKO or other government sites, but can be used for testing.
If you have a valid need to access gov sites, you have a valid need for a
real CAC. Nothing else will do.
I don't think any agency will issue a soft cert that works the same as a CAC
for obvious security reasons. Soft certs don't work with CAC, but you can
store soft certs and private keys on many generic smart cards. The problem
is that middleware (Apple's tokend) is needed for each new type of card.
Both smart cards and soft certs can be shared between two or more computers.
The CAC identifies the user, and not the computer.
Paul Nelson
Thursby Software Systems, Inc.
on 3/1/07 7:58 AM, Brad Cox, Ph.D. at email@hidden wrote:
> I need a CAC card (or equivalent; I've been told an ECA soft cert might
> do) to support consulting work with govt agencies (see
> http://giglite.org) that works on my Macs (G4 Desktop and MacBook Pro).
>
> I'm confused as to exactly what I need, where to get them, and what this
> will cost. In particular:
>
> 1) Do I need a card or will a soft cert do? How do the results differ?
> Can I sign email with a soft cert? Can I access AKO? Other govt websites
> like eGov, etc? I'm familiar with ECA certs as of about 2 years ago with
> DISA. But they were tightening their policy even then so that soft certs
> would no longer do. Mine expired around then.
>
> 2) If I do need a card, where do I get one that works for Macs? I know
> about the NPGS "CAC on a Mac" paper.
>
> 3) Do soft certs work with cards?
>
> 4) Any issues sharing a card/softCert between desktop and laptop?
>
> 5) Where should I apply for the certs? Where should I buy the card?
>
> Sorry if this is a FAQ. Too many moving parts, never addressed as a
> whole by any reference I've found. Hoping someone here can help.
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Fed-talk mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
