There are three working modules to access the PKCS #11 keys on your CAC. The Linux CAC Reader stack is based on a set of middleware called PCSC (Personal Computer Smart Card), written by the MUSCLE (Movement for the Use of Smart Cards in a Linux Environment) project.Įnter this into Terminal and execute: sudo apt install libpcsclite1 pcscd pcsc-tools PKCS #11 module The following is a guide to assist in setting up Linux Mint to access CAC-enabled DoD websites. US Department of Defense (DoD) now limits access to many of its websites to be via a smart Common Access Card (CAC) authenticated with a Personal Identification Number (PIN). If you test this against an Ubuntu derivative and it works or does not work, please contact me or leave a comment to let me know.

Note that not all derivatives were tested. In Finder, navigate to Go > Utilities and launch KeychainAccess.This is a guide that is tested to work with Ubuntu and its Derivatives including Linux Mint.Safari and Google Chrome rely on Keychain Access properly recognizing your CAC certificates. Configure Chrome and Safari, if necessary.This can make it appear that your certificates are issued by roots other than the DoD Root CA 2 and can prevent access to DoD websites. These instructions walk through adjusting the trust settings on the Interoperability Root CA (IRCA) > DoD Root CA 2 and the US DoD CCEB IRCA 1 > DoD Root CA 2 certificates to prevent cross-certificate chaining issues. Address the cross-certificate chaining Issue.Please refer to this page for specific installation instructions. In order for your machine to recognize your CAC certificates and DoD websites as trusted, the installer will load the DoD CA certificates on OS X.

The OS X Smartcard Services Package allows a Mac to read and communicate with a smart card. Download and install the OS X Smartcard Services package.In addition, please review the DoD CAC Reader Specifications for more information regarding card reader requirements. At this time, the best advice for obtaining a card reader is through working with your home component. Typically Macs do not come with card readers and therefore an external card reader is necessary. You can get started using your CAC on your Mac OS X system by following these basic steps:

Download dod certificates for mac