Re: [Fed-Talk] FileVault - CAC possible bug.
Re: [Fed-Talk] FileVault - CAC possible bug.
- Subject: Re: [Fed-Talk] FileVault - CAC possible bug.
- From: Brian Raymond <email@hidden>
- Date: Sat, 07 May 2005 22:36:03 -0400
On 5/7/05 7:26 PM, "Shawn Geddis" <email@hidden> wrote:
>
> On May 5, 2005, at 9:43 PM, Scott Jones wrote:
>
>> I wanted to post an anomaly I noticed that will probably affect
>> federal folks the most.
>>
>> I have discovered an issue with filevault and running smart card
>> services. When FileVault has a master password set and you browse
>> to a pki enabled web site with safari, safari asks you for your
>> FileVault master password. When you enter it successfully it tells
>> you that the web site will not accept it and asks you to choose a
>> new certificate, and the inserted CAC certificate is listed. As
>> soon as I highlight it and click OK Safari crashes, this did not
>> occur before turning on FileVault. Removing the FileVault keychain
>> files in /library/keychains corrects this issue (but it leaves a
>> blank keychain.
>
> Scott,
>
> FileVault and Smart Card Services are currently (as of 10.4.0) not a
> compatible combination.
I heard rumblings last fall that 10.4 was supposed to have addressed these
issues. It's seems ironic to me that one of the sectors in which people have
an interest in File Vault are running into all sorts of problems using it
with another big feature Apple advertises to Federal customers, CAC support.
I am an Apple proponent and have convinced a number of people to try Macs
that wouldn't have otherwise and in reading the feature list more then one
person was sold on the File Vault feature. I get to most people before they
turn it on but a couple have actually lost data from trying it. If these are
known issues an OS as "advanced" as OSX should warn users of these things
when attempting them so they know the consequences.
- Brian
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden