Re: [Fed-Talk] CAC+Safari in 10.5.4
Re: [Fed-Talk] CAC+Safari in 10.5.4
- Subject: Re: [Fed-Talk] CAC+Safari in 10.5.4
- From: Richard Sperling <email@hidden>
- Date: Wed, 02 Jul 2008 05:27:56 -0400
I'm still running 10.5.2, and I was able to access both of the
websites Basil mentioned without a problem.
CAC: AXAL TO ACCESS 64K
Reader: OMNIKEY CARDMAN 3121
Driver: Leopard (10.5.2)
Richard
On Jul 1, 2008, at 5:12 PM, Basil Decina wrote:
Same experience with the same sites listed below using:
CAC: AXALTO ACCESS 64K
Reader: USB SCRRx31 (one with Firmware 4.13 and another with
Firmware 5.18)
Driver: Standard one that comes with MacOS Leopard (10.5.1 upgraded
through 10.5.4)
Also, I can't get into:
https://dod411.gds.disa.mil/
https://ara-1.c3pki.chamb.disa.mil/ara/Key?value=88096 (but this
link may be stale)
Basil
On Jul 1, 2008, at 2:05 PM, Kerry wrote:
CAC: Oberthur v5.2
Reader: SCR331 (USB)
Driver: (Thursby's replacement driver in - /usr/libexec/
SmartCardServices/drivers/)
Working:
--
https://www.hpcmo.hpc.mil/security/kerberos/auth/pki/
Not Working:
--
https://www.us.army.mil/ ("CAC Login" link)
https://iase.disa.mil/ (Any CAC protected links from the main page)
https://www.jtfgno.mil/
https://powhatan.iiie.disa.mil/
-
Kerry A. Matthews | email@hidden
Major Shared Resource Center
U.S. Army Engineer Research and Development Center
Vicksburg, MS
On Jul 1, 2008, at 10:33 AM, Joel Rennich wrote:
On Jul 1, 2008, at 10:21 AM, Kerry wrote:
> OS X 10.5.4 was released yesterday, and according to: http://support.apple.com/kb/HT1994
>
> One of the fixes for Safari is:
>
> "Resolves issues that may be encountered when accessing secure web
> pages with client certificates that reside on a smart card"
> ---
>
> I've installed the update but I'm still having issues with some
CAC
> protected sites (like AKO), while at least one or two work.
>
> Did this update work for anyone else?
The update should address some, but not all, of the problems
encountered when using a smart card for client authentication.
We're still working with a few sites to determine what else needs to
be done. This has gotten complicated as it seems to have gotten back
to a specific combination of cards and readers as some readers and
cards will work with a site that other readers and cards won't.
While we continue to investigate this it would be helpful to know
what
sites now work and what don't for you.
Thanks,
Joel Rennich
Consulting Engineering Manager
Apple Enterprise Sales
email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden