Re: [Fed-Talk] GEMPLUS 64K CAC with Firefox? (UNCLASSIFIED)
Re: [Fed-Talk] GEMPLUS 64K CAC with Firefox? (UNCLASSIFIED)
- Subject: Re: [Fed-Talk] GEMPLUS 64K CAC with Firefox? (UNCLASSIFIED)
- From: Michael <email@hidden>
- Date: Thu, 29 Mar 2007 17:20:21 -0400
On Mar 29, 2007, at 4:10 PM, Yokel-Contractor, Grant wrote:
I have been testing CAC authentication with OWA on my MacBook Pro
(10.4.9) for the past couple months now and have proved
successful except with one card...You guessed it, the GEMPLUS 64k CAC.
My card is labeled "GEMPLUS GXP3 64V2N" on the top back left. Is
that the same card? I have used this card without problems since it
was issued back about March 2006. I only have tested it with
Keychain, OS X Mail, and Safari.
All other cards I've tested (Oberthur, Axalto, Schlumberger)
have worked flawlessly. The GEMPLUS is recognized in Keychain
Access, displays the cert's, and will unlock if directed to do so.
However when I pull up Firefox with DOD Configuration 0.6.1 and go
into the Certificate Manager, the cert's won't pull up. If you
put in any other CAC, your immediately prompted for your PIN upon
clicking the "view certificates" tab, and the cert's will display,
thus you know you will be prompted for a choice of what cert to use
when you attempt OWA. When you attempt with a GEMPLUS on OWA, it
immediately brings you to a 401 error. I'm using a SCR331 flashed
with 5.22 firmware.
My card reader is a ActivCard reader flashed to OEM SCR331, not sure
the firmware, I think it is version 4.13 based on the information in
System Profiler (product id: 0xe001, vendor id: 0x04e6).
Yet another reason I'm not flashing our card readers to new firmware
until they don't work.
Michael
I've also tried with Safari, Camino, and
BonEcho. The first time I attempted to use a GEMPLUS with Firefox I
actually rendered the browser to a non-operational state, forced
to troubleshoot and eventually re-install. Has anyone seen any
success with a GEMPLUS 64K?
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden