Re: [Fed-Talk] CAC Setup on Intel MACs
Re: [Fed-Talk] CAC Setup on Intel MACs
- Subject: Re: [Fed-Talk] CAC Setup on Intel MACs
- From: Dow Street <email@hidden>
- Date: Fri, 5 Oct 2007 07:39:22 -0700
Also, the NPS instructions reference the ActivCard Gold software (on
the Windows machine) as part of the firmware update process, but I
don't think this is necessary. XP seemed to recognize the card
reader and had all the necessary drivers for updating the firmware
without having ActivCard Gold installed. Of course, if you want to
use your CAC on the Windows box, or verify the reader is working
correctly (using Windows), you would need to install ActivCard Gold.
One other note (has been mentioned before) - the dialogue box when
unlocking your CAC keychain requests your password - this is really
your *CAC PIN*, not some other system or keychain *password*. I
think Safari, Mail, etc. will prompt you for this password (i.e. PIN)
also, if the CAC keychain is not unlocked when you try and access it
through one of those applications.
R,
Dow
On Oct 5, 2007, at 7:23 AM, Mike Jackson wrote:
You are right. DO NOT Copy the certs from the CAC to the keychain.
Here is the super high level overview.
Obtain a CAC reader. Make sure the CAC reader is CCID compliant.
This means for an "SCR331" reader it needs at least Firmware
revision 5.18 (5.22 is current). SCM Microsystems firmware updater
ONLY runs on Windows XP.
After the CAC reader is CCID compliant, plug it into your computer.
Insert your CAC into the Reader.
Open up KeyChain Access.app
You should see an entry for "Smart Card #[x]" (where x is some number.
Unlock the Smart Card. A small dialog should display asking for
your PIN.
Enter your PIN.
It should unlock and show you the certs on the card.
You are done with the basic setup.
--
Mike Jackson Senior Research Engineer
Innovative Management & Technology Services
On Oct 5, 2007, at 10:18 AM, Paul Nelson wrote:
This paper keeps getting cited, but I think the step that tells
users to
copy their certs to the keychain should not be recommended.
Is there some application that needs this? Why is this in the
paper? The
section in question is included below.
Paul Nelson
Thursby Software Systems, Inc.
on 10/5/07 9:05 AM, Mike Jackson at email@hidden wrote:
http://cisr.nps.edu/downloads/nps_cs_06_009.pdf
--
Mike Jackson Senior Research Engineer
Innovative Management & Technology Services
On Oct 5, 2007, at 10:03 AM, Bush, Robert W (J6C) wrote:
Has anyone successfully setup and used a Federal Common Access
Card (CAC) on
an Intel based Mac? If so, would you, please, walk me through it?
From http://cisr.nps.edu/downloads/nps_cs_06_009.pdf
Copy new Certificates from CAC to Login Keychain:
You must copy your CAC credentials from the CAC card to the login
(default)
keychain.
a) Insert your USB CAC reader into the system
b) Launch Keychain Access (Go | Utilities | Keychain Access)
c) Click on Show Keychains.
d) Insert your CAC into the reader.
Note that a new entry appears (smart card #x).
e) Click on the smart card #x keychain.
f) Select the certificates with your name (Last.First.MI.xxxxxxx)
and click
on Edit
| Copy.
g) Click on the login (default) keychain and click on Edit | Paste.
h) Close Keychain Access.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
40linquest.com
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden