Re: [Fed-Talk] MacOS X Catalina & CAC support
Re: [Fed-Talk] MacOS X Catalina & CAC support
- Subject: Re: [Fed-Talk] MacOS X Catalina & CAC support
- From: "Gendler, Bob \(Fed\) via Fed-talk" <email@hidden>
- Date: Tue, 8 Oct 2019 14:36:56 +0000
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=v1APdfn/DV9QNPeHeK9bqwBKRGjxoGZXNaWaNS0Wdk0=; b=F0J42PnrFJWVpC5/Mj311O3+Tf44PZ7ZJ3DW5aF7IWjVo4HOjfPZUSD1+4mgEe6s+NvQzcjmmDC0IZoLpJCh8CEjIs9DsVRq/M0vA1kdehJQG6/a8wdhASANGDI0dedr+0zL8HKurtmKGMWhGi4tmrSkwVqTbnURLmStr69dcSblUYqOehyYlfwEafmgEKnqxIu54aK/xdycKcd1fCtt7zhCDw43JsoAby2LpNpJFc3+t//lSjAo04rHoUNr5JmPj4uUJCZRTzBkYQr7OBE+hqae9gwwu/x9sn8s/zm2jtIecoPQnl9fX801fwoBS65eScabt3tnEPbwQSKGaTZ7zA==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PR1y5h9h7M3JMpQdZub9tCsVRjzENkjbXEFE3M5r8sdM3uRHgWa+T8plsKlYDcqC/pRvcaQXUmA5recmf3l9bdxS/yOzgGUzRU0wLH0PkYXzUrtw+ewBMZj+TLBXQijtYekvZN9FwqqYCXxSRCqI+gPlH1TaTgBExr4aN7pmw8wVVReQqkJ/pa71wmiDRpFfNNjHXXk0qOSAZkLAZxN1mFNWy10CC+IeRQIF0W8Ba7QlJv1LdmNAXAg5qKYuv6uD8cZftazsLsUhzR5w5NupS+hyUff+AqS7sNQZh13qGdWmf1MuVesIey1Alc3ZwoF8ussy02ZF3F2Uq58yXhrM2Q==
- Thread-topic: [Fed-Talk] MacOS X Catalina & CAC support
Acrobat secretly and quietly added CTK support back in roughly August I think.
I can't remember the exact version that added it.
Preferences -> Signatures -> Creation & Appearance More button. And you can
enable CTK there. Why it isn’t by default who knows? And why is it so buried?
Also who knows.
But it's definitely the only option for Firefox.
Bob Gendler
IT Specialist (Security)
OISM | Managed Desktop Mac Team
U.S Dept. of Commerce | NIST
(301) 975-6054 | email@hidden
--
On 10/8/19, 10:17 AM, "Fed-talk on behalf of Ken Hornstein via Fed-talk"
<fed-talk-bounces+robert.gendler=email@hidden on behalf of
email@hidden> wrote:
Everyone,
It is my understanding that MacOS X Catalina has finally killed off support
for third-party token daemons ("tokend") which make smart cards available
via the older Keychain APIs.
I tested out my keychain-pkcs11 plugin, and it worked fine on Catalina
with Firefox (for web browsing) and Adobe Acrobat (for document
signing). Now obviously I am biased because I wrote keychain-pkcs11,
but as far as I know currently it is the only option for CAC/smartcard
support for those two applications on Catalina. If there are other
options to make these applications work on Catalina I would love to hear
about them. And if anyone has problems with keychain-pkcs11 I would
be interested in hearing about them.
--Ken
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
https://gcc01.safelinks.protection.outlook.com/?url=https://lists.apple.com/mailman/options/fed-talk/robert.gendler%40nist.gov&data=02|01|email@hidden|a6031f809dae4834b9c008d74bfa46bf|2ab5d82fd8fa4797a93e054655c61dec|1|0|637061410606568256&sdata=p6m33v+2ph/gCQE0rQvEBoa1xMroSdPVARWuOvu7aOE=&reserved=0
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden