Re: [Fed-Talk] NSERC access after upgrading to macOS 10.12
Re: [Fed-Talk] NSERC access after upgrading to macOS 10.12
- Subject: Re: [Fed-Talk] NSERC access after upgrading to macOS 10.12
- From: David Mueller <email@hidden>
- Date: Wed, 30 Nov 2016 08:45:00 -0800
- Dkim-filter: OpenDKIM Filter v2.10.3 cnssd.spawar.navy.mil uAUGixN3013438
When CACKey 0.7.8 is installed, it disables the new Sierra smart card stuff (pivtoken) and installs a tokend module. The CAC then appears in the keychain like it did under El Capitan and Safari can use it that way. The uninstall script for CACKey 0.7.8 reenables pivtoken.
- David
> On Nov 30, 2016, at 8:39 AM, Blumenthal, Uri - 0553 - MITLL <email@hidden> wrote:
>
> AFAIK, Safari on Sierra cannot/doesn’t use CACKey. On 10.12, both Apple Mail and Safari access PIV tokens (including CAC) via pivtoken. And if pivtoken doesn’t like your CAC for whatever reason, that’s it. I wonder whether you see anything in the logs when this hangup occurs. Also, PKard can be configured to provide rather extensive (and useful!) log.
>
> One option to try would be Google Chrome or Mozilla Firefox with CACKey 0.7.8.
> —
> Regards,
> Uri
>
>
> On 11/30/16, 11:29 AM, "fed-talk-bounces+uri=email@hidden on behalf of Bill Jackson" <fed-talk-bounces+uri=email@hidden on behalf of email@hidden> wrote:
>
> Has anyone been successful in opening a connection to https://nserc.navy.mil after upgrading to macOS 10.12.1? CAC is required for
> access, and when I try to connect the web page ask for the CAC PIN and then just hangs. Contacted the NSERC Helpdesk and they could
> see the connection , but said they never received the CAC credentials.
>
> I setup 4 separate environments to test and make sure it was macOS related:
>
> iMac 1:
> Mac OS X 10.11.6
> Safari 10.0.1
> PKard (CAC middleware) 1.7
>
> iMac 2:
> Mac OS X 10.11.6
> Safari 10.0.1
> CACKey (CAC middleware) 0.7.4
>
> iMac 3:
> macOS 10.12.1
> Safari 10.0.1
> PKard 1.7
>
> iMac 4:
> macOS 10.12.1
> Safari 10.0.1
> CACKey 0.7.8
>
> iMac 1 and 2 have no problem connecting to the NSERC website using CAC, where iMac 2 and 3 both just hang after ask for the CAC certificate.
>
> As with most Navy Helpdesks, they only support Macs if it just works, so if anyone has found a solution to this problem it would be greatly appreciated.
>
> Thanks,
>
> Bill Jackson
> SPAWAR Systems Center Pacific
> (619)553-2291
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden