noobuv.blogg.se

1. CAC CARD READER FOR MAC SCR3310 INSTALL
2. CAC CARD READER FOR MAC SCR3310 DRIVERS
3. CAC CARD READER FOR MAC SCR3310 DRIVER
4. CAC CARD READER FOR MAC SCR3310 MANUAL

If you have previously installed libcackey.so and you wish to utilize CoolKey instead, you will have to unload the “CAC Module”: modutil -dbdir sql.pki/nssdb/ -delete “CAC Module” Test out your browser “modutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database.”Ĭhrome should now be able to utilize the CAC without any issues Removing CAC Module If you were not in your home directory when configuring modutil you will receive an error like: If it is properly installed there will be an entry with “CAC Module” and details of the library, slot and status. Make sure that the utility is properly installed, in Terminal: Modutil -dbdir sql.pki/nssdb/ -add 'CAC Module' -libfile /usr/lib/pkcs11/opensc-pkcs11.so Unfortunately, Chrome (Chromium) doesn’t automatically recognize the CAC once you’ve completed all the previous steps but it doesn’t take much more work to get Chrome to work with the CAC. usr/lib/pkcs11/opensc-pkcs11.so Configure Chrome / Chromium

CAC CARD READER FOR MAC SCR3310 DRIVERS

Module filename: either type in or browse to the location of the opensc-pkcs11.so drivers Module name should be something like: DoD CAC

CAC CARD READER FOR MAC SCR3310 DRIVER

To install/reinstall the CAC driver in Firefox using the above listed Security Devices Select the entry and select Unload to remove the security device If it doesn’t work then the entries are wrong. It should show an entry similar to “CAC Module” along with certificate(s) as a sub-item. Some require the non-email certificate while Enterprise Email will require the email certificate.īelow the Certificates heading, select the radio button in front of “Ask me every time.”Ĭheck the left column.

When accessing multiple CAC protected pages, some pages will require different certificates from the card. Set Firefox to Require Selection of Certificate

CAC CARD READER FOR MAC SCR3310 INSTALL

Select the Import… button at the bottom of the dialog and install the following certificates. Select View Certificates Continue for All versions of Firefox This can be done through Firefox import mechanism. The current method of installing the certificates is one-by-one.

CAC CARD READER FOR MAC SCR3310 MANUAL

Make note of the location you stored these certificates Configure Firefoxįirefox requires manual selection of the PKCS #11 module. The certificates can be obtained from this link: PC/SC device scanner V 1.4.18 (c) 2001-2011, Ludovic Rousseau Compiled with PC/SC lite version: 1.8.8 Using reader plug’n play mechanism Scanning present readers… Waiting for the first reader… Authority Certificatesĭownload extract and install the DoD Certificates. Similar to this indicates a need to check for additional driver requirements for your hardware: PC/SC device scanner V 1.4.18 (c) 2001-2011, Ludovic Rousseau Compiled with PC/SC lite version: 1.8.8 Using reader plug’n play mechanism Scanning present readers… 0: O2 Micro Oz776 00 00 Sun Mar 24 11:40:07 2013 Reader 0: O2 Micro Oz776 00 00 Card state: Card removed Similar to the following means the card reader is working properly: You might have to insert a smart card in order for the message to pop-up. Open a terminal (ie konsole, x-term or other) and type/enter. Sudo systemctl enable pcscd Testing your Smart Card Driver Check your hardware and search using the key word pcsc. You may have to install additional drivers for your hardware. Without installing any additional drivers the following card readers are tested and work without issue: SCR3310 by SCM Microsystems (Currently being issued to members by the US Army for use on personal computers) SCR3500 by SCM Microsystems (Many members purchase this as a more compact alternative to the SCR3310) O2 Micro, Inc (built-in to many Dell laptops) Sudo apt install opensc Smart Card Reader Driver

This may be the best option if you are dual persona and do not wish to use CACkey from DISA. This module is speedy like CoolKey and doesn’t lag like CACkey. This module has a broader feature set than CoolKey or CACkey and you are able to access your PIV certificate for those individuals that are Dual Persona. It facilitates their use in security applications such as mail encryption, authentication, and digital signature.

OpenSC provides a set of utilities to access smart cards. You will need to choose which version works best for you. Each have their strengths and limitations. There are three working modules to access the PKCS #11 keys on your CAC.