Menu
Follow Tables 1 through 4 below:
PLEASE READ the preliminary notes before you start:
Preliminary NOTE1: Restart your computer after installing the CAC enabler before trying to access the CAC enabled site
Preliminary NOTE2: Installing multiple enabling programs will cause your system to NOT work. Here's how to uninstall CAC enablers
Common Access Card (CAC) Gemalto.NET cards; Follow the instructions provided by your vendor’s macOS-compatible smart card reader and cryptographic middleware for configuring user devices. Certificates must be stored on a smart card, not on the user device. Citrix Receiver for Mac does not save the user certificate choice. To date, there is not Bluetooth CAC reader for the iOS. If there was, you would still have to write an app to process the certificates and make them available for a mail client or safari. Mac OS X has 'Keychain Access', a utility that has a built in ability to do the work for you. PC's have to use middleware, such as Active Client.
Preliminary NOTE3: Some of the CAC enablers below will ask for a 'keychain password,' it is asking for your CAC PIN. Make sure if it asks for your Keychain password after you select your CAC certificate, that you use your CAC [6-8 digit / all number] PIN.
If you block your CAC, you'll have to visit an ID card office to get it unblocked. Unfortunately, only one of the programs below has the capability to show you when your CAC is blocked.
Table 1: See which CAC enabling program will work with your version of OS X
Once you've decided, go to Table 2
Compatible with: | JAXs Automated Package | PKard | CACKey | Centrify Express for Mac Smart Card | SmartCard Services | Manual Install of files | Charismathics Smart Security Interface (CSSI) | Lightweight Portable Security (LPS) |
Yosemite (10.10.x) | ||||||||
Mavericks (10.9.x) | ||||||||
Mountain Lion (10.8.x) | ||||||||
Lion (10.7.x) | ||||||||
Snow Leopard (10.6.x) | ||||||||
Leopard (10.5.x) | Note1 |
Note1: Computer must have an Intel processor, will not work with a PPC processor
Table 2: Verify the CAC enabling program you selected above will work with your specific CAC.
Once you've verified it will work, go to Table 3.
Compatible with: | JAXs Automated Package | PKard | CACkey | Centrify Express for Mac Smart Card | SmartCard Services | Manual Install of files | Charismathics Smart Security Interface (CSSI) | Lightweight Portable Security (LPS) |
GEMALTO TOP DL GX4 144 CAC | Note2 | |||||||
GEMALTO DL GX4-A 144 CAC | Note2 | |||||||
Oberthur ID One 128 v5.5 Dual CAC | ||||||||
G&D FIPS 201 SCE 3.2 CAC | Note2 | Note1 | Note1 |
Note1: I haven't tested the 'G&D FIPS 201 SCE 3.2' CAC yet with these enablers. If you have one and have tested with the question marked enablers above, please contact me
Note2: SmartCard Service update for OS X 10.9.x will ONLY work with the Gemalto TOPDLGX4 144 & G&D FIPS 201 SCE 3.2 CACs. Oberthur 5.5 & Gemalto GX4-A 144 users will need to utilize a different CAC enabler.
.
Table 3: Now verify the CAC enabling program you selected in steps 1 and 2 is:
a. Compatible with Firefox (if you plan to use this web browser)
b. Will read your PIV cert (for Dual Persona users), or
c. You want support from the vendor.