RE: [Fed-Talk] CAC Setup on Intel MACs
RE: [Fed-Talk] CAC Setup on Intel MACs
- Subject: RE: [Fed-Talk] CAC Setup on Intel MACs
- From: "MacLeod, Donald H ERDC-ITL-NH Contractor" <email@hidden>
- Date: Fri, 5 Oct 2007 09:30:32 -0500
- Thread-topic: [Fed-Talk] CAC Setup on Intel MACs
Are there additional steps to include FireFox as CAC-aware. I thought FF
maintained its own certificate store. There might also be some minor
differences in operational details with FF. In the past FF did not seem to be
as friendly as Safari when the CAC is removed and put back in to the reader.
-----Original Message-----
From: fed-talk-bounces+donald.h.macleod=email@hidden
[mailto:fed-talk-bounces+donald.h.macleod=email@hidden
] On Behalf Of Mike Jackson
Sent: Friday, October 05, 2007 10:24 AM
To: Apple Fed Talk
Subject: Re: [Fed-Talk] CAC Setup on Intel MACs
You are right. DO NOT Copy the certs from the CAC to the keychain.
Here is the super high level overview.
Obtain a CAC reader. Make sure the CAC reader is CCID compliant. This means
for an "SCR331" reader it needs at least Firmware revision 5.18
(5.22 is current). SCM Microsystems firmware updater ONLY runs on Windows XP.
After the CAC reader is CCID compliant, plug it into your computer.
Insert your CAC into the Reader.
Open up KeyChain Access.app
You should see an entry for "Smart Card #[x]" (where x is some number.
Unlock the Smart Card. A small dialog should display asking for your PIN.
Enter your PIN.
It should unlock and show you the certs on the card.
You are done with the basic setup.
--
Mike Jackson Senior Research Engineer
Innovative Management & Technology Services
On Oct 5, 2007, at 10:18 AM, Paul Nelson wrote:
> This paper keeps getting cited, but I think the step that tells users
> to copy their certs to the keychain should not be recommended.
> Is there some application that needs this? Why is this in the paper?
> The section in question is included below.
>
> Paul Nelson
> Thursby Software Systems, Inc.
>
> on 10/5/07 9:05 AM, Mike Jackson at email@hidden wrote:
>
>> http://cisr.nps.edu/downloads/nps_cs_06_009.pdf
>>
>>
>> --
>> Mike Jackson Senior Research Engineer
>> Innovative Management & Technology Services
>>
>>
>>
>> On Oct 5, 2007, at 10:03 AM, Bush, Robert W (J6C) wrote:
>>
>>>
>>> Has anyone successfully setup and used a Federal Common Access Card
>>> (CAC) on an Intel based Mac? If so, would you, please, walk me
>>> through it?
>>>
>
> From http://cisr.nps.edu/downloads/nps_cs_06_009.pdf
>
> Copy new Certificates from CAC to Login Keychain:
> You must copy your CAC credentials from the CAC card to the login
> (default)
> keychain.
> a) Insert your USB CAC reader into the system
> b) Launch Keychain Access (Go | Utilities | Keychain Access)
> c) Click on Show Keychains.
> d) Insert your CAC into the reader.
> Note that a new entry appears (smart card #x).
> e) Click on the smart card #x keychain.
> f) Select the certificates with your name (Last.First.MI.xxxxxxx) and
> click on Edit
> | Copy.
> g) Click on the login (default) keychain and click on Edit | Paste.
> h) Close Keychain Access.
>
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
.army.mil
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden