Smart Card/CAC Card problems

Under Snow Leopard (10.6) I loved the fact that CAC card access was built in to the OS. Now however, I can't seem to get ot working again. I need this access for secure access to employer websites. Lion has killed this access and I am not sure how to get it going again without trying some rather pricey softwar ethat or may not work. Any help would be appreciated.

I also was frustrated by installing Lion and finding out CAC readers aren't supported. You DO NOT need to downgrade to 10.6. In these forums I found my way to www.militarycac.com. It will tell you how to make it work. I followed option 1. I downloaded the 2 files placed them in the stated location and presto chang-o I have my CAC reader working on Lion now. I also ordered a small portable CAC reader that's really slick which I just got in the mail today. Tested and it works for accessing email, online training sites, mypay, and everything else I tried. The only thing I can't figure out is DTS which I think is only a windows based signature system. The apple store sells the card reader for $33 including shipping (search for CAC reader) but I found the identical item on ebay for $21.75 including shipping.

Similar Messages

Ever since i plugged my CAC card in, every admin action i take forces the "Insert Smart Card" authorization screen

For months now, I keep getting told to plug in a smart card every time I want to download a game, update a program, or just change settings to my user account. It also keeps telling me my PIN to my CAC is wrong, but I KNOW my PIN still works. I am still
able to log in on all of my Army sites and use those sites with out problems. How do I switch it back? Why is it telling me my PIN is wrong?

Hi,
Would you please let me know if your account associated with your CAC card is a domain account?
Have you tried to contact the domain admin to reset the permission on CAC card to check the issue?
In addition, if the permission for this card is set correctly after confirmation, I would like to know if this issue just happened recently.
If so, you can try to boot into safe mode with local administrator or built-in admin and perform the system restore to see if this issue can be fixed.
Kate Li
TechNet Community Support

How do I get Thunderbird to use my military Cac Card (Smart Card) as my sign-in password for my AKO account?

The army AKO email forces me to redo my password every month unless I use my Cac Card to sign in. How do I get Thunderbird to read my Cac Card and use that to sign into my ako email with? I have found a step-by-step process online (http://militarycac.com/files/Thunderbird_CAC_Digital_Signature.pdf) however when I get to the ActivClient download (step one) it tells me that installing ActivClient might make things not work. Is there an easy way to do this? Please help!

Follow the guide in the pdf at the link below, it should fix the problem:
[http://enterprise-email.org/joint-knowledge-online-cac-login-troubleshooting/ http://enterprise-email.org/joint-knowledge-online-cac-login-troubleshooting/]

CAC Card Problems on MacBook Pro with OS Lion 10.7.3

I bought a CAC Card Reader for my MacBook Pro with OS X Lion 10.7.3 and it doesn't work. The USB is recognizing that it is in there, but when i try and access the AKO website it doesn't work. I know I read on Mac Os Forge about Apple not sending the new OS Lion 10.7 with the smart card reader abilities. But there was also an update on the website for smart card services dated 19 Aug 2011, for OS 10.7. I downloaded it, installed it, and still have had no luck accessing my AKO website. Anyone else have this issue and/or has anyone been able to or have any ideas to figure out how to make it work? Thanks!

Try militarycac.com. The Chief does a good job of discussing the issues that you are trying to address and shows both free and commercial solutions that resolve the issues.
-- Bill

CAC Card Reader not working on 1 of 2 computers

I have an iMac 20-inch early 2009 and a MacBook Pro early 2011. I have installed OSX 10.8.5 on both. I followed the instructions to the letter from http://militarycac.com/ on both computers. I am able to use my SCR331 reader successfully on my MacBook Pro but am not able to use it on my iMac.
On the iMac:
I am able to see the SCR331 is conencted and recognized via System Information. The SCR331 version is 5.25 (updated firmward as suggested at ttp://militarycac.com/)
I attempted to install Centrify (which did not work) so I chose CaCKey instead, which installed just fine
When I plug the reader in, the light lights up steady. When I insert my CAC it does not blink like it should. The CAC certificates do not show up in Keychain either.
When I unplug the reader from my iMac and plug it into my MacBook Pro, it works just fine... I'm missing something somewhere........
Any help wold be greatly apprecitated! Thank you!

I forgot to add:
On my previous version of OSX (unfortunately I can't remember which I upgraded from) I was able to use my CAC Card reader on my iMac. So, after upgrading to 10.8.5 I was no longer able to use it with the OSX native software. I wonder if some of the settings I had to tweak (when using the old OSX) are affecting this problem now...
I had never tried using my reader on my MBP previously.

How to use common access card (CAC) reader with Mozilla Firefox?

Please provide information on how to update Mozilla Firefox settings to allow common access card (CAC) reader digital certificates, thank you.

Try this thread:
* [/questions/752709] Having problems configuring FireFox to use a CAC reader

My CAC Card reader is not working with Firefox

Using Win7 64 bit I can log in to secure site with IE 9 using my CAC Card but cannot log in to the same sites using Firefox 24.3 ESR. Is there a setting I need to change?

check to see if this helps you solve your problem
[https://militarycac.com/firefox.htm Firefox - CAC]

Access certificate from a DoD CAC card with Sun Java 1.4.2 Plug-in

We are using CAC cards with ActivCard Software. We are using Sun Java JVM 1.4.2 with Internet Explorer. The problem is that Sun Java does not use the certificate in the browser certificate store for HTTPS client authentication.
The solution from Sun is to export the certificate as a PKCS12 format and add 3 parameters to the Java Plug-in. The parameters are
-Djavax.net.ssl.keyStore=<client_keystore_file_path>
-Djavax.net.ssl.keyStorePassword=<password to access the client keystore file>
-Djavax.net.ssl.keyStoreType=<keystore_type>
Exporting the certificate from the CAC card is not an option for us.
This is a big problem for us. Does anyone have any ideas on a way to get the Java Plug-in to access the CAC card without having to export the certificate?

You could use JVM 1.3.X because it uses SSL from the Internet Explorer, not the JSSE SSL.
Apart of this, you could see if the implementation of PKCS#11 for the forthcoming J2SDK 1.5 works with your card AND if JSSE can use the PKCS#11 Sun Provider. Download the beta and try it.

CAC card reader with Snow Leopard

I recently switched to my macbook pro, but cannot use my CAC card reader (smart card) to access email and systems from work. The only info I can find indicates that the readers are not supported/compatible with my system. Other than using bootcamp or parallels and Windows XP, does anyone have any guidance? Any assistance would be welcome. Thanks.

I'm trying to use my CAC reader on my new MBP...old MB had Tiger, so I bought SCM SCR331 reader and downloaded the middleware available for it. Was able to log into AF Portal, but never my email...always errored out and I assumed that for some reason, the reader or the OS or Safari, was not using the correct certificate (there are at least 2 on the ID card...one for regular log in and another for email). At work, the PC asks me which certificate to use when I access my email through the AF Portal and I choose the one marked EMAIL. My MB would not ask...
Now, with my brand new MBP, the SCR331 is just not detected. Reading through the information on militarycac.com, I must need a firmware update that is not available for Mac...your information on the SGT111 is very helpful, and since its fairly cheap, I think I will buy one and be rid of firmware issues.
Accessing my email from home is very important to me, so this last post has me feeling a bit deflated. Please update if you figure anything out, I only have the MB and MBP in my home. I'm also thinking of seeing if the 'genius' at my local Apple store can help...

CAC card reader now works in Mac OS....

I finally got my CAC card reader to work in MAC OS. I used the scr3310 reader and MAC OS driver.
Now I need to find a Remote Desktop Connection (RDC) that can use the CAC reader. I have tried both 1.0.3 and 2.0.1 with no success.
Has anyone successfully used a RDC in MAC OS?
Thx !!
Mike

The MS RDP does not yet implement SmartCard enabling (which really ***** as the MS product seems pretty well done otherwise). I got CAC (via VPN) working using RDESKTOP via the installation procedures posted by TRON in August, 2008 under the topic heading "MS Remote Desktop and smart card reader". TRON's procedure makes the appropriate modification to the CONFIGURE file during the build and uses the OpenSource (SourceForge) implementation of RDESKTOP <rdesktop.sourceforge.net>, aka, <www.rdesktop.org>.
Here is a recap of TRON's procedure:
=====================================================
CARD READER ACTIVATION
1.) Plug in your card reader
2.) Open Terminal and run this command:
sudo pcsctool
3.) When prompted, enter your admin password. You should see:
Select the approprate token driver:
1. commonAccessCard.bundle
2. GSCISPlugin.bundle
3. mscMuscleCard.bundle
4. slbCryptoflex.bundle
Enter the number:
4.) Type "1" (without quotes) and press enter, and you should see something like:
Insert your token in: OmniKey CardMan 3121 00 00
Token support updated successfully !
5.) Keep your card reader plugged in and use rdesktop install instructions
RDESKTOP INSTALL
1. Make sure Xcode Tools is installed on your computer. It should be on your OS X install disk.
2. Find out where your X11 libraries are located:
-From the Finder menu, selct "Go" >> "Go to Folder..."
-Type (without the quotes) "/usr/X11", and click "Go"
You should see a bunch of folders. Make sure the "include" and "lib" folders are there. Otherwise you need to find out where the X11 "include" and "lib" folders are located on your computer.
3. Download rdesktop and place the (unarchived) rdesktop-1.6.0 folder on your Desktop
4. Open the X11 application (should be in your Utilities folder)
5. In the X11 window type the following (without the quotes):
"cd Desktop/rdesktop-1.6.0 && ./configure --enable-smartcard -x-includes=/usr/X11/include -x-libraries=/usr/X11/lib && make && sudo make install"
4. Hit enter. When prompted, enter your administrator password and hit enter.
rdesktop should now be installed in the following folder:
/usr/local/bin
So, to launch rdesktop with smartcard log in enabled, open the X11 application (or Terminal application) and type the following (without the quotes, and replace your.server.address with the server address):
"cd /usr/local/bin && ./rdesktop -r scard your.server.address"
Hit enter and it should launch a new X11 window that will try to access the remote server where you should be prompted for your PIN.
To explore more options with rdesktop, open X11 and type the following (without quotes):
"cd /usr/local/bin && ./rdesktop"
Hit enter and you should get a list of options available to rdesktop.
=========================================================
TRON's procedure works. I tried to get it working using the MACPORTS (formerly DarwinPorts) <www.macports.org> implementation of RDESKTOP. It actually uses the same OpenSource implementation, but the build procedures are completely different. The MACPORTS implementation would build properly and run. But I could not get the build to enable SmartCard. I tried modifying the PORTFILE by adding a new variant call that according to SourceForge (ticket#20664) should work:
variant smartcard description {enables smartcard forwarding} {
configure.args-append --enable-smartcard
It probably does work if you can get the CONFIGURE file appropriately. The variant call in the PORTFILE apparently does not do that modification on its own. MACPORTS builds and installs the various software "ports" (including RDESKTOP) by on-the-fly pulling the information form the TAR file into a temporary workspace. So you have to (somehow) make the modification happen as the CONFIGURE file is pulled into temporary workspace. I have not yet figured it out.
The advantage of the MACPORTS implementation is that there is a simple uninstall script built into all of the software "ports". The SourceForge version of RDESKTOP has no such uninstall capability (that I can find) built in. I would, therefore, prefer to use the much more elegant MACPORTS implementation, which leads to my two questions:
1. Has anybody found a straightforward procedure to enable SmartCards/CAC during the build of the MACPORTS version of RDESKTOP?
2. How do I safely and cleanly uninstall the non-MACPORTS <SourceForge.org> version of RDESKTOP?

X.509 cert from a CAC card?

Our customer has multiple servers and the users will all soon be using their DOD CAC cards (SmartCards mandated by Dept of Defense) to provide an x.509 cert to the server. They don't like the fact that each time they move to another server, they have to pick the cert and provide a PIN number.
Is there any way that a servlet can capture the user's cert and present it to the other servers in the farm so that the user only has to pick the cert once? I had thought about using an applet, but they are restricted in their connections to only hit the codebase server, therefore my only other real choice is a servlet running on their Domino server...(?)
Thanks,
Charlie

Thanks Adriaan, to answer your questions:
1) CAC is Common Access Card, it has a chip as would be found in some credit cards (like AMEX Blue). It holds a public and private keep of a user. I have been able to get the user certificate in a web application, but I did not have to go directly to the smart card reader for this.
2) Right now I am developing on a Windows platform, but production is Linux and source code is open source. I have been leveraging javax.smartcardio
3) Not sure about this one, I know that for my code to work, the CardTerminal .connect had to be "T=0", hope that helps.
4) Not sure about the protocols really, but for DoD, each workstation has a card reader, and in order for you to log into the machine, you must have a valid CAC.
Here's is the output of my test code so far:
Card_Info: PC/SC card in SCM Microsystems Inc. SCRx31 USB Reader 0, protocol T=0, state OK
Card Protocol: T=0
ATR: [B@5afd29
ATR historical bytes: [B@1a2961b
response0: 6e 00

Cac card reader

Does mac support cac cards?

Your best resource for information related to smart cards and OS X is here:
http://smartcardservices.macosforge.org
There's not a simple answer to your question: It's very specific to the card, and to whether the right drivers have been written by the card vendor.

Can I sign a Microsoft Word Document with the digital signature from a MIlitary issued CAC card?

Is it possible to sign a MS Word doc with the digital signature froma Military issued CAC card? It is easily done in Adobe but, I cannot find any guidance for MS Word docs.

According to this thread in Microsoft's forums:
http://answers.microsoft.com/en-us/mac/forum/macoffice2011-macword/can-i-how-do- i-add-a-digital-signature-to-a/eb2c2787-b13f-4388-b20f-4580515eec95
this is not possible with Word for Mac.
Regards.

How can I get a CAC card reader to work on a new iPad with a lightning connector?

I need to know if it is possible to use a CAC card reader for military use on a new iPad with a lightning connector. I saw the lightning to USB connector but wasn't sure it the iPad will support it.

Look at this link http://militarycac.com/mobile.htm
 Cheers, Tom

I'm playing clash of clan game now,why I can't purchase gem?The bank staff told me my credit card is no problem,he ask me contact apple iTunes support.

I'm playing clash of clan game now,why I can't purchase gem?The bank staff told me my credit card is no problem,he ask me contact apple iTunes support.

If you are getting a message to contact iTunes Support when you try to buy them then you can do so via this link and ask them for help (we are fellow users here on these forums, we won't know why the message is appearing) : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page, then Purchases, Billing & Redemption
If it's a different problem when you try to buy them ... ?

Smart Card/CAC Card problems

Similar Messages

Maybe you are looking for