#Cac card reader for mac software#
#Cac card reader for mac trial#
#Cac card reader for mac password#

This should allow you access to the website from which you can see/send webmail. As a precaution, reset Safari, then type in the same url into the address window, and hit return. This builds a preference in your 'login' keychain.Ĩ. The prompt next requires you type the EXACT url address of the website you need to access, then select 'Add'. Go back and single-click this certificate in Keychain Access, then right-click on it again, and select 'New Identity Preference' from the menu. It should be named something like 'DOD CLASS 3 CA-5'.ħ. Find the one that does not have 'E-mail' in the 'Issued By' section. Two of the certificates and two of the keys have the word 'e-mail' in the 'Issued By' section of the Info window, and one does not.

Select one of the certificates and right-click (CTRL-click) over it - then select 'Get info' from the menu. You should see three certificates and three private keys.

#Cac card reader for mac password#

You should be prompted for your password - this is your CAC password, not your computer's password.Ħ. Immediately under the stoplight buttons, click on the padlock icon to unlock the CAC keychain. Select this keychain in the left-had side window.ĥ. The card should appear as a keychain on the left-hand side, with a name like 'CAC-1234-5678-9123-4567-XYZ3' or some such. Connect your CAC reader, and insert your card. Go to Keychain Access/Edit/Keychain List, then check the box for X509 Anchors under 'User' and 'Mac OS X System'.Ĥ. Enable the X509 Anchors through 'Keychain Access'. If you can't add the X509 Anchor keychain through Keychain Access, then go to the file itself, copy it, and paste the copy into Finder/(Home folder)/Library/Keychains.ģ. The X509 Anchors are in Finder/(Your HD)/Library/Keychains. If it is not, look for it through Keychain Access by going through File/Add Keychain. Make sure the keychain entitled 'X509 Anchors' is in your keychain list.

(For troubleshooting purposes, I suggest dragging an image of Keychain Access into the dock so you can get to it faster.)Ģ. Otherwise, I recommend you solve those problems first.ġ.

#Cac card reader for mac software#

If your software versions upgraded properly to the latest ones (10.5.4 and Safari 3.1.2), then continue below. I have no idea why this was necessary, but it could have been a problem with my hard drive. I also had to erase my hard drive in order to get Safari upgraded to the latest version. This technique assumes your CAC reader is working and reading your CAC just fine. If you have issues with the CAC reader working, google 'CAC on a Mac', and several links will discuss flashing the CAC reader, etc. A CAC is a keychain of certificates and keys. The tech at Apple promised to take this information back to the Safari developers and try to really solve the problem, namely that Safari does not seem to look for the CAC keychain without being told to allow specific urls.īackground: The CAC reader was working fine. The CAC functionality is restored to the level I had in 10.5.2, but does not 'fix' Safari. This is a work-around technique, which allows you to get to your webmail. I am now able to get into my webmail at the Pentagon, but am not yet able to log into AF Portal using the CAC option - but I think I can with a little more troubleshooting.īottom Line Up Front (BLUF): You need to activate the X509 Anchors, then create an Identity Preference in your login keychain using your CAC, before you will be able to log into webmail.

#Cac card reader for mac trial#

After a lot of discussion with a helpful tech at Apple, and a lot of trial and error, I restored partial CAC functionality to my Mac running 10.5.4 and Safari 3.1.2.