I'm using the SCM Microsystems SCR111 CAC reader (plugs into a serial port) I downloaded the driver from their website. I mostly see the serial and pc card readers. Those all seem to be older SCM models and the drivers are available through their 'Legacy' support. For general card use you probably need Netsign. • • • • Using PIV smart cards for HHS VPN login with Mac OS X 10.10 Yosemite Note: This entire post is basically google search bait designed to (hopefully) allow others struggling with the same issues to save a bit of time. Hope it helps! October 30, 2014 Update There is an active Citrix support thread on the “no valid certificates found” issue. If this is bothering or interesting you, you may want to monitor this URL: / October 24, 2014 Update The bulk of this post concerns the $29 Pkard product from Thursby which is the first I found with explicit OS X 10.10 support. I just had a chance to test the new Yosemite 10.10 compatible free SmartCard utility from Centrfy mentioned here:. Long story short: It works to get past the VPN gateway but throws the same “no valid certificates found” error when trying to login to the Windows desktop via a Citrix Receiver client. Still no idea why this is happening – on other versions of OS X my smart card credentials transparently passed onto the OS. Still – consider the Centrify software if you don’t want to spend $29. Short Summary I need to use a HHS PIV card to remotely access computer systems from a brand new Macbook air running OS X 10.10 Yosemite. As of the time I wrote this article, the state of freely available open source software for PIV smart card support on Yosemite is pretty lacking. Entourage email download for mac. Download Now Secure Download. Publisher's Description. From Softhing: EEAX is the best solution for archiving your email from within Microsoft Entourage. EEAX can archive/export email to many different format and structures and archives are searchable by Spotlight EEAX is fully Unicode. Microsoft Entourage is a discontinued e-mail client and personal information manager that was developed by Microsoft for Mac OS 8.5 and later. Entourage Email Archive X is a handy, trial version software only available for Mac, belonging to the category Internet software with subcategory E-mail (more specifically Since we added this software to our catalog in 2005, it has obtained 4,559 downloads, and last week it gained 0 downloads. Category: Email. Entourage Email Archive X (EEAX) is a utility for archiving emails and attachments you have received or sent using Microsoft Entourage in Mac OS X. EEAX can archive your emails in seven different ways with further sub-options. This will change but if you are in a hurry (as I was) the best thing you can do in the short term is pay $29.95 for the Thursby PKard software from — it installed seamlessly and allowed me to login via VPN although for some reason my certificates were not passed on to the Windows remote desktop system, hopefully I don’t need the $179 “ADmitMac” product for that. How to auto generate table of contents page in microsoft word for mac word. I expect the state of open source smart card and tokend implementations to get better and more easily usable on Yosemite so I may only be using the Thursday product for a short time. Microsoft office 365 for mac review. It did, however work fast and got me successfully logged onto the remote VPN server. Current status: Thursby PKard software works well on Yosemite for VPN access but the Windows desktop I get sent to via a Citrix client reports “no valid certificates” and I’m forced to use my standard user login name and password to complete the final authentication. This was not something I needed to do on OS X 10.7 or 10.7 with the open source smart card software stack. Background I do some subcontracting work for a few US Government agencies, one of which requires me to be able to connect remotely to US.GOV networks and infrastructure. The way I connect is via a federal standard which is a very cool physical badge that doubles as a holder of biometric and personal crypto certificate information. When I’m trying to physically enter a building the PIV card is my secure photo ID badge (with backup biometrics and fingerprints stored o it) — when I try to enter a US Government network “virtually” the same PIV card doubles as VPN access device because it contains a personal set of crypto keys that uniquely identify me. Two-factor authentication is achieved by having to punch in a PIN code when my certs are presented to the remote system. It’s a very slick and interesting system. From what I can tell, PIV cards are very similar to the carried by military members that are often required for secure web browsing and access to military resources In fact, when searching the internet for PIV assistance you will find that some of the best help resources are coming from the military CAC-user community. A perfect example of this is and – the site that I turned to first when looking for OS X Yosemite PIV/smartcard status info. My Gear • SCM SCR3500 Smart Card Reader – Amazon Link: • Belkin flexible USB adapter – Amazon Link: • Macbook Air running OS X 10.10 Yosemite Getting the PIV card to work on 10.10 Yosemite Verify your reader works Attach your reader, use the OS X “About this Mac” -> “System Report” function to verify that your computer and OS actually see and recognize a smart card device: Buy and install the PKard software Launch OS X Keychain Assistant What you want to see is the certificates and credentials that are stored on the smart card. If your USB reader and the PKard software are working, Yosemite 10.10 can now “see” the crypto info stored on the PIV card Fix the Trust Chain (If your PIV certificate is not trusted) This may not be an issue for an upgraded system but on my brand new laptop my host OS was missing the intermediate certificate trust chain. Keychain Assistant helpfully throws up the red text saying: “ This certificate was signed by an unknown authority” OS X Yosemite does not “trust” the Certificate Authorities that signed my PIV card certificates.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |