Actividentity Cac Software Download for Mac Updated
Actividentity Cac Software Download for Mac
Between mid October 2019 and mid Feb 2020 everyone in the Army was migrated to use their PIV Hallmark document for Email access. You no longer use the Electronic mail certificate for Enterprise Electronic mail or any CAC enabled websites
Mac users who choose to upgrade (or already have upgraded) to Mac OS Catalina (10.15.x), Big Sur (eleven.xx.x), or Monterey (12.x.x) will need to uninstall all 3rd Party CAC enablers per https://militarycac.com/macuninstall.htm AND reenable the native smart card ability (very lesser of macuninstall link higher up)
If you purchased your Mac with OS Catalina (10.15.x) or Big Sur (11.xx.x) already installed, you can skip the uninstall part higher up and follow the instructions below.
6 "loftier level" steps needed, follow downward the folio to brand this a painless systematic process
Step 1: Is your CAC reader Mac friendly?
Visit the USB Readers page to verify the CAC reader you have is Mac friendly.
Visit the USB-C Readers page to verify the CAC reader you lot take is Mac friendly.
"Some, not all" CAC readers may need to accept a driver installed to make it work.
NOTE: Readers such as: SCR-331 & SCR-3500A may demand a firmware update (NO OTHER Readers need firmware updates).
Information well-nigh these specific readers are in Step two
Step 2: Can your Mac "come across" the reader?
Plug the CAC reader into an open USB port earlier proceeding, give it a few moments to install
Pace 2a: Click the Apple tree Icon in the upper left corner of the desktop, select "Virtually This Mac"
Stride 2b: Click "System Report..." (button)
Step 2c: Verify the CAC reader shows in Hardware, USB, under USB Device Tree. Different readers will show differently, most readers have no trouble in this step. Run into Step 2c1 for specific reader issues.
Pace 2c1: Verify firmware version on your SCR-331, SCR-3310 v2.0, GSR-202 , 202V, 203 , or SCR-3500a reader. If you have a reader other than these 6, Proceed straight to step 3
Step 2c1a-SCR-331 reader
If your reader does not look like this, go to the next step.
In the "Hardware" drop down, click "USB." On the right side of the screen under "USB Device Tree" the window will display all hardware plugged into the USB ports on your Mac. Look for �SCRx31 USB Smart Bill of fare Reader.� If the Smart Card reader is present, await at "Version" in the lower right corner of this box: If you have a number below 5.25, you demand to update your firmware to 5.25. If yous are already at 5.25, your reader is installed on your arrangement, and no further hardware changes are required. Yous can at present Quit Arrangement Profiler and proceed to Stride 3.
Step 2c1b-SCR-3310 v2.0 reader
If your reader does not look like this, get to the next step.
In the "Hardware" drop down, click "USB." On the right side of the screen nether "USB Device Tree" the window volition brandish all hardware plugged into the USB ports on your Mac. Look for �SCR3310 v2.0 USB Smart Menu Reader.� If the Smart Carte reader is nowadays, wait at "Version" in the lower right corner of this box: If you accept a number below half dozen.02, it will non read the "G+D FIPS 201 SCE 7.0" or the "GEMALTO DLGX4 128Kv2" CACs on Mac Bone 10.xv.7 or newer. I contacted HID (the company that makes these readers) on xiv DEC 2020 to find a fashion to update the firmware to 6.02. They said at that place is non firmware update for the reader. If your reader is older, you lot may need a new one. Please await at: https://militarycac.com/usbreaders.htm to find a compatible ane. If you are already at version 6.02, your reader should work fine on your Mac and no further hardware changes are required. You can now Quit Organisation Profiler and continue to Pace 3.
Step 2c1c-SCR-3500A reader
If y'all have the SCR3500 A P/N:905430-i CAC reader, you may need to install this driver, as the ane that installs automatically will not work on most Macs. Agree the command fundamental [on your keyboard] when clicking the .pkg file [with your mouse], select [the word] Open
Step 3: Verify which version of MacOS y'all have?
(Yous need to know this information for step half-dozen)
Pace 3a: Click the Apple Icon in the upper left corner of your desktop and select "Virtually This Mac"
Step 3b: Look beneath Mac Bone X for: Example: Version 10.X.X, or 11.10
Step iv: Figure out which CAC (ID Card) you take
(You demand to know this information for step six)
Look at the superlative back of your ID carte du jour for these card types. If you have any version other than the seven shown beneath, you lot need to visit an ID carte office and take it replaced. All CACs [other than these six] were supposed to exist replaced prior to 1 October 2012.
A guide to assist figure out which CAC you take
Find out how to flip menu over video
Pace 5: Install the DoD certificates (for Safari and Chrome Users)
Firefox users follow guidance in Step 5a
Go to Keychain Access
Click: Go (peak of screen), Utilities, double click Keychain Access.app
(You can likewise type: keychain admission using Spotlight (this is my preferred method))
Select login (under Keychains), and All Items (under Category).
Download the 5 files via links below (you may need to <ctrl> click, select Download Linked File As... on each link) Save to your downloads folder
Please know... IF You have any DoD certificates already located in your keychain admission, you will demand to delete them prior to running the AllCerts.p7b file below.
https://militarycac.com/maccerts/AllCerts.p7b,
https://militarycac.com/maccerts/RootCert2.cer,
https://militarycac.com/maccerts/RootCert3.cer,
https://militarycac.com/maccerts/RootCert4.cer , and
https://militarycac.com/maccerts/RootCert5.cer
Double click each of the files to install certificates into the login department of keychain
Select the Kind cavalcade, verify the arrow is pointing up, scroll down to document, look for all of the post-obit certificates:
DOD DERILITY CA-1
DOD EMAIL CA-49 through DOD EMAIL CA-52,
DOD Electronic mail CA-59,
DOD E-mail CA-62 through DOD E-mail CA-65
DOD ID CA-49 through DOD ID CA-52,
DOD ID CA-59,
DOD ID CA-62 through DOD ID CA-65
DoD Root CA 3 through DoD Root CA v,
DOD SW CA-53 through DOD SW CA-58,
DOD SW CA-lx through DOD SW CA-61, and
DOD SW CA-66 through DOD SW CA-69
NOTE: If you are missing any of the above certificates, yous have ii choices,
1. Delete all of them, and re-run the 5 files above, or
two. Download the allcerts.zip file and install each of the certificates you are missing individually.
Errors:
Fault 100001 Solution
Fault 100013 Solution
You may notice some of the certificates will have a red circle with a white X 
. This means your computer does not trust those certificates
You demand to manually trust the DoD Root CA 2, 3, iv, & v certificates
Double click each of the DoD Root CA certificates, select the triangle adjacent to Trust, in the When using this certificate: select Always Trust, echo until all iv do non accept the cerise circle with a white X.
You may be prompted to enter computer countersign when you close the window
Once yous select Always Trust, your icon volition take a lite blue circle with a white + on it.
The "bad certs" that have acquired bug for Windows users may evidence up in the keychain admission section on some Macs. These demand to be deleted / moved to trash.
The DoD Root CA two & iii y'all are removing has a light bluish frame, leave the yellow frame version. The icons may or may not have a red circumvolve with the white ten
 | or |  | DoD Interoperability Root CA one or CA two | certificate | ||
 | DoD Root CA ii or three (low-cal blue frame Only) | certificate | ||||
| | or | | Federal Bridge CA 2016 or 2013 | certificate | ||
| | or | | Federal Common Policy CA | document | ||
| | or | | or | | SHA-1 Federal Root CA G2 | certificate |
| | or | | United states DoD CCEB Interoperability Root CA i | document |
If you have tried accessing CAC enabled sites prior to post-obit these instructions, please go through this page earlier proceeding
Clearing the keychain (opens a new page)
Please come dorsum to this page to keep installation instructions.
Step 5a: DoD document installation instructions for Firefox users
NOTE: Firefox volition not piece of work on Mac OS x.12.x or newer when using the native Apple tree smartcard power
Firefox as well requires the installation of CACKey and configured to use information technology.
Download AllCerts.zip, [remember where you relieve it].
double click the allcerts.zip file (it'll automatically extract into a new folder)
Option i to install the certificates (semi automatic):
From inside the AllCerts extracted folder, select all of the certificates
<command> click (or Right click) the selected certificates, select Open With, Other...
In the Enable (selection box), change to All Applications
Select Firefox, then Open
Yous will see several dozen browser tabs open up, let information technology open every bit many every bit it wants..
You will eventually start seeing either of the 2 messages shown side by side
If the certificate is non already in Firefox, a window volition pop upwards stating "You accept been asked to trust a new Certificate Authorization (CA)."
Bank check all three boxes to allow the certificate to: identify websites, identify email users, and identify software developers
or
"Alert This certificate is already installed as a document say-so." Click OK
Once y'all've added all of the certificates...
� Click Firefox (give-and-take) (upper left of your screen)
� Preferences
� Advanced (tab)
� Printing Network under the Avant-garde Tab
� In the Cached Spider web Content section, click Clear At present (push).
� Quit Firefox and restart it
Selection 2 to install the certificates (very tedious manual):
Click Firefox (word) (upper left of your screen)
Preferences
Advanced (tab on left side of screen)
Certificates (tab)
View Certificates (push button)
Authorities (tab)
Import (button)
Browse to the DoD certificates (AllCerts) extracted folder you downloaded and extracted above.
Annotation: You lot have to practise this pace for every single certificate
Note2: If the certificate is already in Firefox, a window will pop up stating: "Warning This certificate is already installed as a document authority (CA)." Click OK
Note3: If the certificate is non already in Firefox, a window volition pop up stating "Y'all accept been asked to trust a new Certificate Authority (CA)."
Bank check all three boxes to allow the document to: place websites, identify e-mail users, and identify software developers
Once you lot've added all of the certificates...
� Click Firefox (word) (upper left of your screen)
� Preferences
� Advanced (tab)
� Press Network under the Advanced Tab
� In the Buried Web Content section, click Clear Now (button).
� Quit Firefox and restart it
Stride half-dozen: Make up one's mind which CAC enabler you can / desire to use
But for Mac El Capitan (10.11.10 or older)
https://militarycac.com/cacenablers.htm
After installing the CAC enabler, restart the computer and get to a CAC enabled website
NOTE: Mac Os Sierra (10.12.10), High Sierra (x.13.x), Mojave (10.14.x), Catalina (10.15.10), Large Sur (11.ten), and Monterrey (12.ten) computers no longer need a CAC Enabler.
REMINDER: Users who cull to upgrade (or already take upgraded) to Mac OS Catalina (10.15.10), Big Sur (11.xx.x), or Monterey (12.x.x) will need to uninstall all 3rd Party CAC enablers per https://militarycac.com/macuninstall.htm AND reenable the native smart card ability (very bottom of macuninstall link above)
Try to access the CAC enabled site you need to access now.
If you have problems, please follow images below to verify if your CAC is being read by your computer
Click the Apple Icon in the upper left corner of the desktop, select "Virtually This Mac"
Click the "Organisation Report..." push button
Scroll down the left column to the "Software" section so click on "SmartCards"
If you see hundreds of lines of "gibberish" these are your certificates beingness read from your CAC.
Example of CAC not being read. You'll only see roughly15 lines of text.
If this is what is happening to y'all, it could mean your CAC reader needs a driver or firmware update. Await for your reader on the CAC readers page to verify if your reader and CAC combination is uniform with each other.
REMINDER: Users who choose to upgrade (or already accept upgraded) to Mac Os Catalina (10.xv.x), Large Sur (11.20.x), or Monterey (12.ten.x) will demand to uninstall all 3rd Party CAC enablers per https://militarycac.com/macuninstall.htm AND reenable the native smart card ability (very bottom of macuninstall link above)
Mac back up provided by: Michael Danberry
Actividentity Cac Software Download for Mac
Posted by: dianashough1996.blogspot.com
