| Compatible with: | JAXs
Automated
Package | PKard | CACKey | Centrify
Express
for Mac
Smart
Card | SmartCard
Services | Manual
Install of
files | Charismathics
Smart
Security
Interface
(CSSI) | Lightweight
Portable
Security
(LPS) |
Yosemite
(10.10.x) |
| Mavericks (10.9.x) |
| Mountain Lion (10.8.x) |
| Lion (10.7.x) |
| Snow Leopard (10.6.x) |
| Leopard (10.5.x) | Note1 |
Note1: Computer must have an Intel processor, will not work with a PPC processor
Table 2: Verify the CAC enabling program you selected above will work with your specific CAC.
Once you've verified it will work, go to Table 3.
| Compatible with: | JAXs
Automated
Package | PKard | CACkey | Centrify
Express
for Mac
Smart
Card | SmartCard
Services | Manual
Install of
files | Charismathics
Smart
Security
Interface
(CSSI) | Lightweight
Portable
Security
(LPS) |
| GEMALTO TOP DL GX4 144 CAC | Note2 |
| GEMALTO DL GX4-A 144 CAC | Note2 |
| Oberthur ID One 128 v5.5 Dual CAC |
| G&D FIPS 201 SCE 3.2 CAC | Note2 | Note1 | Note1 |
Note1: I haven't tested the 'G&D FIPS 201 SCE 3.2' CAC yet with these enablers. If you have one and have tested with the question marked enablers above, please contact me
Note2: SmartCard Service update for OS X 10.9.x will ONLY work with the Gemalto TOPDLGX4 144 & G&D FIPS 201 SCE 3.2 CACs. Oberthur 5.5 & Gemalto GX4-A 144 users will need to utilize a different CAC enabler.
Cac Middleware For Mac Catalina
.
Table 3: Now verify the CAC enabling program you selected in steps 1 and 2 is:
a. Compatible with Firefox (if you plan to use this web browser)
b. Will read your PIV cert (for Dual Persona users), or
c. You want support from the vendor.
Once you've decided, go to Table 4 and select the link to the CAC enabler you decided you want to use.
| Compatible with: | JAXs
Automated
Package | PKard | CACkey | Centrify
Express
for Mac
Smart
Card | SmartCard
Services | Manual
Install of
files | Charismathics
Smart
Security
Interface
(CSSI) | Lightweight
Portable
Security
(LPS) |
| Firefox web browser | Note3 | Note |
| Reads PIV certificate (Dual Persona Personnel) | Note1 | Note1 | Note2 |
| Can show you if your CAC is blocked |
| Vendor provides support | help | help | help |
Note1: PIV cert has to already be activated.
Note2: Will read without having to activate PIV cert
Note3: Will work with the paid version of Centrify User Suite
Table 4: Click link below for the CAC enabler you decided you want to use based on tables 1-3 above.
| CAC Enabler |
| JAX's Automated Package |
| PKard from Thursby |
| CACKey |
| Centrify Express for Mac Smart Card |
| SmartCard Services |
| Manual Install of files |
Charismathics Smart Security Interface (CSSI)
sold only by: SCB Solutions & TX Systems |
| Lightweight Portable Security (LPS) |
Specifics for the following versions of Mac OS X can be found at these links:
Yosemite (10.10) users, utilize the Yosemite support page
Mavericks (10.9.x) users, utilize the Mavericks support page
Mountain Lion (10.8.x) users, utilize the Mountain Lion support page Getdataback free with
crack for windows 7.
Lion (10.7.x) users, utilize the Lion support page
Snow Leopard (10.6.x) users, utilize the Snow Leopard support page
Leopard (10.5.x) users, utilize the Leopard support page
Tiger(10.4.x) users, utilize the Tiger support page
The four (4) current CAC Types are.
Look at the back of your ID card (above the black magnetic strip) for one of the examples below. If you have any other versions, you need to visit an ID card office and have it replaced. All CACs other than these shown below were to be replaced prior to 1 October 2012.
Find out how to flip card over video
Information / download links City life edition 2008 serial code.
Version 1.5 (and above) supports OS 10.9.x & 10.10 and will read the PIV cert for dual persona personnel
Purchase PKard from Thursby Software or TX Systems
PKard demo
Thursby offers US phone, email and forums support for the software they've been developing for over 7 years and is 100% made in the USA
.You may be able to setup your GEMALTO TOP DL GX4 144, or GEMALTO DLGX4-A 144 CAC on your Mac WITHOUT PKard
NOTE:Oberthur ID One 128 v5.5 Dual CAC holders (DO NOT follow guidance below, because it will NOT work for you)
G&D FIPS 201 SCE 3.2 CAC is unknown for this package(If you have one of these CACs, please contact me)
Use JAX's Automated PACKAGE, to perform the steps below
Once you run this file and have restarted your computer, Click here to continue
Cac Middleware For Mac Os
You can also install the files manually by following these instructions (for those of you who want to know what JAXs package is really doing to your computer):
Download these two files to your computer: CAC.tokend & CACNG.tokend
Once downloaded, click on the download arrow in the upper right corner of your Safari browser
Right click each of the two files: CACNG.tokend & CAC.tokend and select Show in Finder
From the Downloads / Finder folder, drag the files to:
<your hard drive> / System / Library / Security / tokend /
NOTE:(IF the 'tokend' folder is not there, create it by Right clicking and selecting New Folder, or for a one button mouse, select <ctrl> and click your mouse button).
NOTE: You may receive a message [like below], you'll need to select 'Authenticate' and enter your computer administrator password to move these files.
Now verify it worked by visiting: Keychain Access
Here's How: Click: Go (in the taskbar at the top of the screen), Utilities, Keychain Access.app
NOTE: If you don't see Go, click the finder icon in your Dock. Click Utilities, Keychain Access.app
You 'should' see CAC.###-### under Keychains, you may also see your last name with your EDI-PI after it, or PIV II (it depends on which program you are using to communicate with your CAC.
You 'should' now be able to visit CAC enabled websites
If you are still having problems, contactus.
Please select a browser below to access instructions for configuring your browser to use the certificates on your CAC.
IE and Chrome
First check whether your certificates are already available to your browser.
For Internet Explorer 8.0 and above:
- Navigate to Tools > Internet Options > Content and click Certificates.
- On the Personal tab, review the list of certificates to determine if your CAC certificates are in the list. The certificates on your CAC will be issued by a DoD CA.
- If the certificates appear in the list, you are finished. If the certificates do not appear in the list, please see the note below.
For Google Chrome:
- Navigate to Tools > Options > Under the Hood and click Manage Certificates in the HTTPS/SSL section.
- On the Personal tab, review the list of certificates to determine if your CAC certificates are in the list. The certificates on your CAC will be issued by a DoD CA.
- If the certificates appear in the list, you are finished. If the certificates do not appear in the list, please see the note below.
NOTE: If your certificates are not in the list and you’re using ActivClient, please make sure it is installed correctly. If your certificates are not in the list and you are using other middleware, you can contact your CC/S/A for more information on the middleware requirements for your organization. You can find their contact information on our Contact Us tab.
Firefox
Below are complete instructions for using Firefox with your CAC. You may also download these instructions.
Install Certificates from InstallRoot
- Download and install the InstallRoot tool following the instructions in the InstallRoot User Guide or watch this video to learn how:
- Open the InstallRoot tool and select Firefox/Mozilla/Netscape from the Select Trust Store picklist at the bottom of the window.
- Ensure only the top Install DoD NIPRNET Certificates box is checked.
- Click the Install button and wait for the installation to complete. Please wait until you see a confirmation dialog indicating the tool is finished.
Using Common Access Card (CAC) certificates in Firefox
These instructions will enable ActivIdentity’s ActivClient software to work within Firefox. Before proceeding, try to ensure the latest version of ActivClient is installed by going to the ActivClient website to check the latest version. Before installing the latest version, please uninstall any previous versions of ActivClient.
As of version 6.2, ActivClient by default configures Firefox to accept the CAC certificates without any additional configuration. You may use the following instructions to verify that it has been installed properly. If using an older version of ActivClient, these instructions will assist with proper configuration.
- Open Firefox
- Click on Tools > Options in the menu bar.
- In the Options window, go to Advanced > Encryption > Security Devices.
- In the new window, click on Load.
- Enter “ActivClient(CAC)” for the Module Name.
Click Browse to the right of the Module Filename field. Browse to the location of the ActivClient PKCS11 library, acpkcs211.dll. This is typically located at C:Program Files (x86)ActivIdentityActivClientacpkcs211.dll in ActivClient 6.2, and C:Windowssystem32acpkcs201-ns.dll in ActivClient 6.1 and earlier.
Click OK, and then OK again in the confirmation window.
- The confirmation message will show that the security device (CAC) was loaded. CAC certificates can now be used with the browser. Click OK to close the window.
Ensure the Online Certificate Status Protocol (OCSP) is Performing Revocation Checking
With any versions of ActivClient later than 6.2, these settings will be automatically configured.
Meshcam 6 keygen. However, these instructions can be used to confirm proper configuration for older versions of ActivClient.
- Open Firefox
- Click on Tools > Options in the menu bar.
- In the Options window, go to Advanced > Encryption > Validation.
- Ensure the option Use the OCSP to confirm the current validity of certificates is checked. Also ensure When an OCSP server connection fails, treat the certificate as invalid is checked.
Safari
To get started you will need:
- CAC (see note below)
- Card reader
You can get started using your CAC on your Mac OS X system by following these basic steps:
- Get a card reader
Typically Macs do not come with card readers and therefore an external card reader is necessary. At this time, the best advice for obtaining a card reader is through working with your home component. In addition, please review the DoD CAC Reader Specifications for more information regarding card reader requirements. - Download and install the OS X Smartcard Services package
The OS X Smartcard Services Package allows a Mac to read and communicate with a smart card. In order for your machine to recognize your CAC certificates and DoD websites as trusted, the installer will load the DoD CA certificates on OS X. Please refer to this page for specific installation instructions. - Address the cross-certificate chaining Issue
These instructions walk through adjusting the trust settings on the Interoperability Root CA (IRCA) > DoD Root CA 2 and the US DoD CCEB IRCA 1 > DoD Root CA 2 certificates to prevent cross-certificate chaining issues. This can make it appear that your certificates are issued by roots other than the DoD Root CA 2 and can prevent access to DoD websites. - Configure Chrome and Safari, if necessary
Safari and Google Chrome rely on Keychain Access properly recognizing your CAC certificates.- In Finder, navigate to Go > Utilities and launch KeychainAccess.app
- Verify that your CAC certificates are recognized and displayed in Keychain Access
Note: How to kotor save editor for mac. CACs are currently made of different kinds of card stock. To determine what card stock you have, look at the back of your CAC above the magnetic strip. Most CACs are supported by the Smartcard Services package, however Oberthur ID One 128 v5.5 CACs are not. Third party middleware is available that will support these CACS; two such options are Thursby Software’s PKard and Centrify’s Express for Smart Card.
