Re: [Fed-Talk] SUCCESS: CAC & OS 10.5
Re: [Fed-Talk] SUCCESS: CAC & OS 10.5
- Subject: Re: [Fed-Talk] SUCCESS: CAC & OS 10.5
- From: "Walls, Bryan K. (MSFC-IS30)" <email@hidden>
- Date: Tue, 4 Mar 2008 11:31:25 -0600
Title: Re: [Fed-Talk] SUCCESS: CAC & OS
10.5
SCM has now posted scmccid_5.0.4_installer_Mac.zip which is, in
fact, an installer for the SCM driver that seems to work on Leopard
for both Intel and PPC machines.
http://www.scmmicro.com/support/pcs_downloads.php?lang=en
I also downloaded and installed libusb 0.1.13 beta from
http://www.ellert.se/twain-sane/. I'm guessing it will work okay with
the sourceforge release version libusb 0.1.12, too. The SCM driver
requires libusb to work.
http://sourceforge.net/project/showfiles.php?group_id=1674
http://libusb.wiki.sourceforge.net/
My Oberthur PIV card now shows up in the keychain. I can't get
login to work, though. I followed the directions at
http://docs.info.apple.com/article.html?artnum=304035, everything
looks right, but when I log out and insert the card, I just see the
login window blink. The "Type PIN number" prompt never shows
up.
At 4:11 PM -0600 11/7/07, Ridley J.DiSiena wrote:
Since my last posting I noticed that the
SCM website now issues the file scmccid_5.0.3_mac.tar.gz when you request an OS X
driver for the SCR331 CCID reader. It does not have an installer
package, just install script that seems to need help. My initial
attempts with it have not worked. They appear to be in process
of making a single scmccid.bundle rather than individual bundles for
each model.
I just tried
an older driver that I had from SCM: the scr3xxx_v2.4.1 installer
package. After that is installed, 10.5 GM reads my Oberthur PIV
card with the SCR331, and makes it available to the
keychain.
To sum it
up, Before I install anything on 10.5 GM, I just get the
blinking light on the SCM331 as you mentioned and keychain never sees
my Oberthur card in the SCR331 reader. Attempts at manually
configuring the newest driver from SCM have not worked yet for me,
still trying. The older driver for the SCM appears to be
functional, although I have just begun testing on the 10.5
GM.
It vary well
may be a different issue with the CAC, just thought add my experience
with the SCR331 drivers in case it could help. You may want to
try an older driver from scm just to see if the problem is with the
newest driver.
-Ridley
email@hidden
On Nov 7, 2007, at 12:40 PM, McCreery,
Lee CTR DISA wrote:
Hello All,
I just wanted to give an update to the
issue that we all have been seeing since the release of 10.5 and
CACs.
Following the upgrade from 10.4 to 10.5 I
also noticed that CAC/PKI stopped working(SCR331 & OmniKey 3121
readers). As I mentioned in another thread a co-worker system
seems to work at least for webmail and the PKI required websites we
frequent with the OmniKey 3121 reader.
I upgraded my system at the end of last
week. I also lost my ability to access PKI/CAC enabled sites.
I reverted back to slicking my system and doing an installation from
scratch. The installation was of OSX 10.5 and add-ons like X11.
After connecting back to the network there was an update for
"Login & Key Chains"(downloaded and installed).
After the system was back up I connected my faithful SCR331, but it
would only blink the led repeatedly and the Key Chain viewer &
"sc_auth hash" did not indicate any connection. I
downloaded the MAC drivers for the card reader and also tried
"pcsctool" but it still didn't work. I even attempted
to upgrade the firmware for the reader from 5.18-->5.25...Nothing
new...Failure.
I then connected a different card reader
"OmniKey CardMan 3121". Opened "Key Chain viewer"
and you can guess what I saw. In the top of the list was an
entry for CAC. In the past I was not ever successful in getting
the Omnikey to work with MAC and I followed the mailing list lead in
using the SCR331.
So far my co-worker and I are
successfully able to connect to PKI/CAC enabled webmail and websites
with Safari. We have only attempted to connect with Firefox
which did not work, but we haven't spent much time
troubleshooting.
So if I can supply anymore information
please let me know.
I would like to Thank co-worker April and
her husband David for the leads in making it this far.
Lee
-----------------------------------------
Lee G. McCreery
SPAWAR System Center - Pensacola
FL
mailto:email@hidden <mailto:email@hidden>
_______________________________________________
Do not post admin requests to the list.
They will be ignored.
Fed-talk mailing
list (email@hidden)
Help/Unsubscribe/Update your
Subscription:
asa.gov
This email sent to email@hidden
Content-Type: text/plain;
name="ATT124266526.txt"
Content-Description: ATT124266526.txt
Content-Disposition: inline;
filename="ATT124266526.txt"
_______________________________________________
Do not post admin requests to the list. They will be ignored.
>Fed-talk mailing list
(email@hidden)
Help/Unsubscribe/Update your Subscription:
>
This email sent to email@hidden
--
Bryan
Walls My words are not
NASA policy.
email@hidden (256)544-3311 voice,544-1070
fax
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden