Re: [Fed-Talk] CAC on Mac OS X (Leopard)
Re: [Fed-Talk] CAC on Mac OS X (Leopard)
- Subject: Re: [Fed-Talk] CAC on Mac OS X (Leopard)
- From: "Shawn A. Geddis" <email@hidden>
- Date: Mon, 23 Feb 2009 11:03:07 -0800
On Feb 23, 2009, at 10:18 AM, Paul Nelson wrote:
If you had Thursby’s ADmitMac for CAC installed under 10.5.5 AND you have an SCR 331 reader with firmware version less than 5.25 your setup probably worked fine with 10.5.5 or earlier because Thursby installed an updated CCID Driver bundle
After upgrading to 10.5.6, Apple’s installer deletes the Thursby CCID driver bundle. The newer software from Apple only supports the latest firmware, version 5.25, and your reader no longer works.
Two workarounds:
a) Update the firmware on the reader using the directions supplied by Shawn in an earlier post. You will need Windows XP to do this since the firmware update is not available for Windows 2003. This is the preferred method.
b) You can back out the changes made by Apple. First, run the ADmitMac installer again. Now make sure you have /usr/libexec/SmartCardServices/drivers/CCIDClassDriver.bundle. Next, back up the /usr/libexec/SmartCardServices/drivers/ifd-ccid.bundle and remove it from the drivers folder. Unplug all card readers and reboot. Try the reader now.
Paul Nelson
Thursby Software Systems, Inc.
Careful here....
Folks would be safer considering only following option (a) from Paul to avoid any unexpected problems in the future unless you are using ADmitMac for CAC and are obtaining your Smart Card Services support from Thursby Software Systems, Inc.
After upgrading to 10.5.6, Apple’s installer deletes the Thursby CCID driver bundle.
Apple replaced the Apple provided driver! :-)
Updating to Mac OS X 10.5.6 replaces the OLD CCIDClassDriver.bundle which shipped as part of the OS.
/usr/libexec/SmartCardServices/drivers/CCIDClassDriver.bundle
with a new, validated and shipped CCID Driver
/usr/libexec/SmartCardServices/drivers/ifd-ccid.bundle
Any changes or alterations made to this driver by a third-party or an individual was done at their own risk.
- Shawn _____________________________________________________ Shawn Geddis - Security Consulting Engineer - Apple Enterprise
|
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden