#Cac card reader for mac how to use mac os x#
#Cac card reader for mac how to use install#
#Cac card reader for mac how to use software#
#Cac card reader for mac how to use code#
#Cac card reader for mac how to use password#

#Cac card reader for mac how to use install#

The solution is to go out and install the intermediate certificates necessary to build the full lenght trust chain. OS X Yosemite does not Р В Р вЂ Р В РІР‚С™Р РЋРЎв„ўtrustР В Р вЂ Р В РІР‚С™Р РЋРЎС™ the Certificate Authorities that signed my PIV card certificates. Keychain Assistant helpfully throws up the red text saying: Р В Р вЂ Р В РІР‚С™Р РЋРЎв„ў This certificate was signed by an unknown authorityР В Р вЂ Р В РІР‚С™Р РЋРЎС™ This may not be an issue for an upgraded system but on my brand new laptop my host OS was missing the intermediate certificate trust chain.

#Cac card reader for mac how to use software#

If your USB reader and the PKard software are working, Yosemite 10.10 can now Р В Р вЂ Р В РІР‚С™Р РЋРЎв„ўseeР В Р вЂ Р В РІР‚С™Р РЋРЎС™ the crypto info stored on the PIV cardР В РІР‚СњР В РІР‚РЋix the Trust Chain (If your PIV certificate is not trusted) What you want to see is the certificates and credentials that are stored on the smart card. Getting the PIV card to work on 10.10 YosemiteР В РІР‚СњР В РІР‚С›ttach your reader, use the OS X Р В Р вЂ Р В РІР‚С™Р РЋРЎв„ўAbout this MacР В Р вЂ Р В РІР‚С™Р РЋРЎС™ -> Р В Р вЂ Р В РІР‚С™Р РЋРЎв„ўSystem ReportР В Р вЂ Р В РІР‚С™Р РЋРЎС™ function to verify that your computer and OS actually see and recognize a smart card device:

Macbook Air running OS X 10.10 Yosemite.

Belkin flexible USB adapter Р В Р вЂ Р В РІР‚С™Р Р†Р вЂљРЎС™ Amazon Link:.

SCM SCR3500 Smart Card Reader Р В Р вЂ Р В РІР‚С™Р Р†Р вЂљРЎС™ Amazon Link:.

A perfect example of this is and Р В Р вЂ Р В РІР‚С™Р Р†Р вЂљРЎС™ the site that I turned to first when looking for OS X Yosemite PIV/smartcard status info. ItР В Р вЂ Р В РІР‚С™Р Р†РІР‚С›РЎС›s a very slick and interesting system.Р В РІР‚СњР В РІР‚РЋrom what I can tell, PIV cards are very similar to the CAC cards carried by military members that are often required for secure web browsing and access to military resources In fact, when searching the internet for PIV assistance you will find that some of the best help resources are coming from the military CAC-user community.

#Cac card reader for mac how to use code#

Two-factor authentication is achieved by having to punch in a PIN code when my certs are presented to the remote system. When IР В Р вЂ Р В РІР‚С™Р Р†РІР‚С›РЎС›m trying to physically enter a building the PIV card is my secure photo ID badge (with backup biometrics and fingerprints stored o it) - when I try to enter a US Government network Р В Р вЂ Р В РІР‚С™Р РЋРЎв„ўvirtuallyР В Р вЂ Р В РІР‚С™Р РЋРЎС™ the same PIV card doubles as VPN access device because it contains a personal set of crypto keys that uniquely identify me. The way I connect is via a federal standard PIV Card which is a very cool physical badge that doubles as a holder of biometric and personal crypto certificate information. I do some subcontracting work for a few US Government agencies, one of which requires me to be able to connect remotely to US.GOV networks and infrastructure. This was not something I needed to do on OS X 10.7 or 10.7 with the open source smart card software stack.

#Cac card reader for mac how to use password#

It did, however work fast and got me successfully logged onto the remote VPN server.Р В РІР‚СњР вЂ™Р’В¬urrent status: Thursby PKard software works well on Yosemite for VPN access but the Windows desktop I get sent to via a Citrix client reports Р В Р вЂ Р В РІР‚С™Р РЋРЎв„ўno valid certificatesР В Р вЂ Р В РІР‚С™Р РЋРЎС™ and IР В Р вЂ Р В РІР‚С™Р Р†РІР‚С›РЎС›m forced to use my standard user login name and password to complete the final authentication.

I expect the state of open source smart card and tokend implementations to get better and more easily usable on Yosemite so I may only be using the Thursday product for a short time. This will change but if you are in a hurry (as I was) the best thing you can do in the short term is pay $29.95 for the Thursby PKard software from - it installed seamlessly and allowed me to login via VPN although for some reason my certificates were not passed on to the Windows remote desktop system, hopefully I donР В Р вЂ Р В РІР‚С™Р Р†РІР‚С›РЎС›t need the $179 Р В Р вЂ Р В РІР‚С™Р РЋРЎв„ўADmitMacР В Р вЂ Р В РІР‚С™Р РЋРЎС™ product for that. As of the time I wrote this article, the state of freely available open source software for PIV smart card support on Yosemite is pretty lacking. I need to use a HHS PIV card to remotely access computer systems from a brand new Macbook air running OS X 10.10 Yosemite. Still Р В Р вЂ Р В РІР‚С™Р Р†Р вЂљРЎС™ consider the Centrify software if you donР В Р вЂ Р В РІР‚С™Р Р†РІР‚С›РЎС›t want to spend $29. Still no idea why this is happening Р В Р вЂ Р В РІР‚С™Р Р†Р вЂљРЎС™ on other versions of OS X my smart card credentials transparently passed onto the OS. Long story short: It works to get past the VPN gateway but throws the same Р В Р вЂ Р В РІР‚С™Р РЋРЎв„ўno valid certificates foundР В Р вЂ Р В РІР‚С™Р РЋРЎС™ error when trying to login to the Windows desktop via a Citrix Receiver client. I just had a chance to test the new Yosemite 10.10 compatible free SmartCard utility from Centrfy mentioned here: The bulk of this post concerns the $29 Pkard product from Thursby which is the first I found with explicit OS X 10.10 support. If this is bothering or interesting you, you may want to monitor this URL: There is an active Citrix support thread on the Р В Р вЂ Р В РІР‚С™Р РЋРЎв„ўno valid certificates foundР В Р вЂ Р В РІР‚С™Р РЋРЎС™ issue. Note: This entire post is basically google search bait designed to (hopefully) allow others struggling with the same issues to save a bit of time.

#Cac card reader for mac how to use mac os x#

Using PIV smart cards for HHS VPN login with Mac OS X 10.10 Yosemite