Re: [Fed-Talk] CAC Setup on Intel MACs
Re: [Fed-Talk] CAC Setup on Intel MACs
- Subject: Re: [Fed-Talk] CAC Setup on Intel MACs
- From: Michael Smith <email@hidden>
- Date: Fri, 05 Oct 2007 17:25:56 -0400
- Thread-topic: [Fed-Talk] CAC Setup on Intel MACs
The additional step is, in Firefox, under Advanced, Encryption, Security
Devices, is click the Load button to add a new PKCS #11 module and set the
path to the OS X PKCS security bundle at
/usr/libexec/SmartCardServices/pkcs11/pkcs11.bundle/Contents/MacOS/pkcs11
That will enable FF to use the OS X smart card services. Works very well.
Mike Smith
ERDC-CRREL
On 10/5/07 10:30 AM, "MacLeod, Donald H ERDC-ITL-NH Contractor"
<email@hidden> wrote:
>
> Are there additional steps to include FireFox as CAC-aware. I thought FF
> maintained its own certificate store. There might also be some minor
> differences in operational details with FF. In the past FF did not seem to be
> as friendly as Safari when the CAC is removed and put back in to the reader.
>
>
>
> -----Original Message-----
> From: fed-talk-bounces+donald.h.macleod=email@hidden
> [mailto:fed-talk-bounces+donald.h.macleod=email@hidden
> ] On Behalf Of Mike Jackson
> Sent: Friday, October 05, 2007 10:24 AM
> To: Apple Fed Talk
> Subject: Re: [Fed-Talk] CAC Setup on Intel MACs
>
> You are right. DO NOT Copy the certs from the CAC to the keychain.
>
> Here is the super high level overview.
>
> Obtain a CAC reader. Make sure the CAC reader is CCID compliant. This means
> for an "SCR331" reader it needs at least Firmware revision 5.18
> (5.22 is current). SCM Microsystems firmware updater ONLY runs on Windows XP.
>
> After the CAC reader is CCID compliant, plug it into your computer.
>
> Insert your CAC into the Reader.
>
> Open up KeyChain Access.app
>
> You should see an entry for "Smart Card #[x]" (where x is some number.
>
> Unlock the Smart Card. A small dialog should display asking for your PIN.
>
> Enter your PIN.
>
> It should unlock and show you the certs on the card.
>
> You are done with the basic setup.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden