- Ensure your CAC reader works with Mac
- Check to ensure your Mac accepts the reader
- Check your Mac OS version
- Check your CAC’s version
- Update your DOD certificates
- Guidance for Firefox Users
- Look at graphs to see which CAC enabler to use
Step 1: Purchase a Mac Friendly CAC Reader
Update your system. (10.6.5 is the latest for Snow Leopard) Step 2: Plug in your CAC Reader to an available USB Port. Step 3: Click the Apple Icon in the upper left corner of your desktop and select 'About This Mac'.
Purchase a CAC reader that works for your Mac. There are only a couple that you can choose from and I’ve listed them below.
If you already have a CAC reader and it isn’t Mac friendly, you could update the firmware, however, for the non-tech savvy people out there, it’s probably better to just purchase a new one and save the headache – they’re only ~$11-13 dollars.
Best Mac Compatible CAC USB Readers
- Cac reader free download - Adobe Acrobat Reader DC, Comic Reader Pro, Zinio Reader, and many more programs. Best Video Software for the Mac How To Run MacOS High Sierra or Another OS on Your.
- If you have an SCR-331 CAC reader, you may need to update the firmware to be able to use this older reader on your Mac. There is no guarantee it will work, it is an option to try before purchasing a new reader.
- APPLE SUPPORT START PAGE (ALL Mac related pages within MilitaryCAC). IPhone and iPad users can use their CAC and access CAC enabled websites using several different software apps and CAC readers (including accessing DTS on your iPad). Look here for installation steps.
Best Mac Compatible CAC Desk Readers
Step 2: Plug in and Ensure It’s Accepted
Once you have your CAC reader, plug it into your Mac and ensure your computer recognizes it. If you have one of the CAC readers we suggested above, then you should be good to go.
If you are testing a different version, then verify that your Mac accepts your CAC reader by following these steps.
If for some reason your CAC reader isn’t working, then try the following steps.
Step 3: Update Your DOD Certificates
Now that you have your CAC reader connected and accepted on your Mac computer, it’s time to ensure you have the right certificates in order to access DOD CAC required web pages.
If you are using Chrome or Safari, then follow step 3a below. If you are using Firefox, you’ll need to do some extra steps:
- Type ⇧⌘U (Shift + Command + U) to access your Utilities
- Find and Double click “Keychain Access”
- Select “Login” and “All Items”
- Download the following four files and double click each once downloaded so as to install in your Keychain Access.
- When you double-click the Mac Root Cert 3 and 4, you’ll need to tell your browser to always trust them. Click the button like you see below:
Additional Steps for Firefox
- Download All Certs zip and double click to unzip all 39 files
- While in Firefox, click “Firefox” on the top left, then “Preferences”
- Then Click “Advanced” > “Certificates” > “View Certificates”
- Then Click “Authorities” and then “Import”
- Import each file individually from the “AllCerts” folder. When you do this, the below box will popup. Check all three boxes and click “OK”
Step 4: Download and install CAC Enabler
- Download zip
- Double click the .zip file
- Because this is from an unidentified developer, you’ll need to hold down “Control” and click the program. Now select open and continue with install procedure.
- After installing, restart your computer
CAC Access at Home Success
Now that you have a CAC reader, certificates, and a CAC Enabler, you should now be able to access any CAC-enabled website and log on using your CAC password and data.
Common Reasons Why Your CAC Card Won’t Work On Your Mac
Ensure Your CAC Card Meets the Standards: In order for your CAC card to work, it must meet the minimal requirements. Currently, there are only four types of CAC cards that can be used. The ensure you have the right CAC card for online access, flip your CAC card to the back and if you have one of the below numbers written on the top left, then you are good to go:
- G&D FIPS 201 SCE 3.2
- Oberthur ID one 128 v5.5 Dual
- GEMALTO DLGX4-A 144
- GEMALTO TOP DL GX4 144
If you do not have any of the above written on the back, then proceed to your nearest PSD to get a new CAC card issued.
MOST of the questions we receive can be corrected / answered by you trying these ideas first:
1. Please relook at the Mac CAC Install page for instructions on how to install what is needed to use a CAC on your Mac.
2. If you have already installed the needed program (based on the link in #1 above) or are having problems accessing websites you have successfully accessed previously, follow this page to learn how to clear the login section of your keychain.
Cac Readers For Mac
.
3. If you have an SCR-331 CAC reader, you may need to update the firmware to be able to use this older reader on your Mac. There is no guarantee it will work, it is an option to try before purchasing a new reader.
4. If you have an IOGear GSR202, GSR202V, or GSR203 CAC reader and are having problems using it. You may need to downgrade the firmware on it [using a Windows computer (or Boot camped Mac)] by following these instructions.
5. You need to know that not every CAC enabler will with work with OS X 10.9.x (Mavericks) or OS X 10.10 (Yosemite).
6. Load the DoD Intermediate certificates into your keychain then If your CAC has a CA between 27 and 32 you may need toinstall the CA 27 to 32 and CA Email 27 to 32. You can download the AllCerts.zip (http://militarycac.com/files/maccerts/AllCerts.zip) file, then double click each certificate in the folder to have them installed into your login section of keychain.
7. If DTS is not working, please follow ideas on the DTS support page.
8. If you purchased and installed PKard and are having problems, contact Thursby for support
8a. If you installed Centrify Express and are having problems when using it, contact Centrify for support
8b. If you purchased and installed Charismathics Smart Security Interface (CSSI) and are having problems, contact Charismathics for support
9. If you have recently updated to 10.9.x (Mavericks) from another version [and you were successfully using your CAC previously], you'll need to uninstall your CAC enabling program[s], restart computer, then install a new version of your CAC enabler. Look at the CAC enablers page to see which CAC enablers are compatible with 10.9.x. Also follow #2 above
9a. If you have recently updated to 10.10 (Yosemite) from another version [and you were successfully using your CAC previously], you'll need to uninstall your CAC enabling program[s], restart computer, then install a new version of your CAC enabler. Look at the CAC enablers page to see which CAC enablers are compatible with 10.10. Also follow #2 above
10. You receive 'Error Code: 500 Internal Server Error. The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. (12202).' Or your system worked recently, but has since stopped working for webmail / OWA, try these ideas:
10-1. Make sure you use your EMAIL certificate [for most users] and PIV certificate (for Dual Persona users) IF you have selected the wrong certificate, you will need to clear your keychain.
10.2. Close all open browsers, reopen one of them and try accessing the site again.
10-3. Clear your keychain, uninstall all CAC enabling programs, restart computer, reinstall one CAC enabling program, restart computer and try again. You may want to try a different CAC enabling program as well.
10-4. Follow #6 above
10-5. If you are classified as Dual Persona, you'll need to review this chart to select one of the three known CAC enablers that support the PIV certificate.
.
***NOTE: If none of the 5 ideas in #10 work for Error Code 500, please contact the Army Enterprise Service Desk (AESD) and demand they support you and figure it out. It should not be up to Mike Danberry to figure out fixes for DISAs DoD Enterprise Email system. Over 90% of the questions we're receiving now are this specific error 500 message. The ideas above have worked for most people. AESDs number is: 866-335-2769***
11. If you are having problems logging onto all CAC websites [and you can see your name entry between the words: keychain and login in Keychain access] you may have blocked your CAC. Only PKard will let you verify a blocked CAC on a Mac, otherwise, you'll need a Windows computer (or virtual Windows) via ActivClient. If your CAC is blocked, your only option is to visit an ID card office to get the card unblocked.
12. If you see 'f5, Your session could not be established'
Use Cac Reader On Mac
when logging into your Enterprise Email, please clear your keychain and try again. If that does not work, try again later. Remember to select your Email certificate (unless a dual persona, you'll user your activated PIV cert)
If you are a Windows user (or using Windows in a Virtual Machine or Bootcamp), go here to ask your question. (Please do NOT use the form below for Windows questions)
Iogear Cac Reader Certificates For Mac
Please provide the correct information asked in the form below. The intent is to reply to you with correct ideas for you to try. We may offer incorrect ideas to fix your issue if you provide incorrect information below.
PLEASE COMPLETE THIS FORM FOR Mac SUPPORT
The 4 current CAC Types are...
(Look at the back of your ID card above the black strip for any of these. If you have any other version, you need to visit an ID card office and get it replaced. All CACs other than these four were 'supposed' to be replaced by 1 October 2012).
Which CAC do I have video
Read more about the older CACs and replacing them
Contact us the following ways:
1. Contact form above (Preferred method) |
2. Email: Click to solve reCAPTCHA to see email address |
3. CALL / TEXT / Skype / FACETIME |
4. Through remote access to your computer |