Due to changes in macOS Sierra, we needed to make some changes to PKard for Mac to prevent conflicts with Apple's new built-in smart card solution. We have released PKard for Mac v1.7 to fully support macOS Sierra and provide the same easy access to secure sites that our customers have become use to. Question: Local accounts and network-based user login is failing after installing macOS High Sierra 10.13 on computers running Centrify DirectControl Agent for Mac version 5.4.1 or earlier.
This fall, Apple will release macOS Sierra, a major update to the Mac operating system. This FAQ will answer some of the general questions you may have to help you learn what it’s all about and whether you should install it on your Mac. We’ll update this FAQ with more questions, answers, and details as the release date approaches.
- KB-5765: How to block OS X updates via Group Policy. To block users from updating macOS to High Sierra, Sierra or El Capitan releases, use the below steps. KB-3282: How to configure a VPN interface to connect with Centrify for Mac OS X KB-6041: How to show current license type in use by adclient.
- PKard ® for Mac replaces the native macOS PKI solution to provide users with a solid product with full, free, U.S. Based support. It is the same commercial code used by the Pentagon, all six DoD services, White House, NIH, and DOI across tens of thousands of Mac users since the mid-2000s.
macOS? What happened to OS X?
Apple decided to change the name in order to fit with the names of iOS, watchOS, and tvOS. So no more Roman numerals (or that annoying person who insists on calling it “OS ex”).
Some trivia, if you’re interested: macOS isn’t entirely a new name. Before version 10, Apple used to call its Mac operating system Mac OS, with the last version being Mac OS 9. Apple change the name to OS X when version 10 was released in 2001.
Does Apple still name its Mac operating systems after California locations?
Yup. This one is macOS Sierra.
More trivia: Sierra refers to a mountain range in central and eastern California. It’s also called the Sierra Nevada, and a small part of the range lies in the state of Nevada. (Sierra is Spanish for mountain range and Nevada is Spanish for snowfall.) Lake Tahoe, a popular snow sports location in the winter and a frequently-visited lake in the summer, is located in the Sierra. Yosemite National Park (which is home to El Capitan) is also there. Mount Whitney, the highest peak in the contiguous United States, is in the Sierra.
What version of the Mac operating system is this?
10.12.
When will it be available?
macOS Sierra is available now. It started shipping on September 20, 2016.
How much will it cost?
Apple makes its operating systems available for free, and macOS Sierra will be no different.
How do I get macOS Sierra?
Though the App Store.
Will it run on my computer?
Here’s the list of Macs that will run macOS Sierra.
- MacBook (Late 2009 and later)
- MacBook Air (2010 and later)
- MacBook Pro (2010 and later)
- Mac mini (2010 and later)
- iMac (Late 2009 and later)
- Mac Pro (2010 and later)
Compatibility with Sierra, however, isn’t as simple as checking to see if your Mac is on the list. Here’s the complete story on Sierra compatibility, and Apple has information on what features are available based on region and language.
Should you upgrade to macOS Sierra?
Once you’ve determined that you have compatible hardware, deciding to upgrade is a personal choice. If you absolutely depend on a specific app and would be crippled without it, you should wait to make sure from that app developer that their software will work with macOS Sierra.
If you do decide to upgrade, make sure you back up your data first. If you end up having a serious problem, you can revert back using your backup.
Read our in-depth review of macOS Sierra
I heard that Siri is in macOS Sierra. True?
It’s true. There will be a Siri icon in the dock. Clicking on it activates Siri. You can use it as you would with your iPhone, like say, if you need directions, are trying to find a nearby restaurant, or want information on a topic.
You can also use it to find files on your Mac. For example, you can tell Siri to find all the files with the word “report” in it, and Siri will list those files.
Siri also lets you work with other Apple apps. You can take Siri results for, say, an image, and then drag and drop the image into a Keynote presentation. You can have Siri find a location in Maps, and then drag the location into an email.
Apple has not announced a third-party API for macOS Siri. Siri works only with Apple apps. So, for example, if you want Siri to read your emails to you, you must use the Apple Mail app.
How to use Siri in macOS Sierra
I also heard that Apple Pay is coming to the Mac. Yes?
Yes. When you’re shopping online and you see an Apple Pay button, you can click on it to use Apple Pay to pay for it. You still need your iPhone, however. Apple Pay on the Mac uses the iPhone’s Touch ID to verify your purchase; you can also press your Apple Watch side button twice.
Speaking of the Apple Watch, why can’t I use it to unlock my Mac?
Well, with macOS Sierra, you can. When your Mac has been inactive or you’re powering it up and you get to the login screen, a feature called Auto Unlock will sense your Apple Watch and instantly log you in. No more typing your password.
What are the other new features?
Cac Reader For Mac Os X High Sierra
Here’s a list of the major new features showcased at Apple’s Worldwide Developers Conference. They include iCloud Drive Desktop access, Optimized Storage, Picture in Picture, Tabs, and Universal Clipboard.
Some of the other neat features:
- Apple File System, a new file system not only for macOS but also for iOS, tvOS, and watchOS. Launches in 2017.
- enhanced Messages.
- support for third-party app integration with the Contacts app.
- Apple Music improvements.
Photos for Mac gets new features, too. A new Memories tab automatically creates slideshows based on events, places, or people. There’s also support for extensions for Photos that will allow for editing of Live Photos. When you make an edit, it will apply to the whole Live Photo, not just the one sequence you edited.
Safari will have a major change in the way it handles content that uses plug-ins like Flash, Silverlight, and QuickTime. You’ll see an alert that tells you the plug-in is not installed, and you’ll need to click on a “Click to use” button to see the content. Apple is doing this to force websites to load—if it’s available—HTML5-compliant media implementations.
6 'high level' steps needed, follow down the page to make this a painless systematic process
Step 1: Your CAC reader must be Mac friendly
Visit the USB Readers page to verify the CAC reader you have is Mac friendly
'Some, not all' CAC readers may need to have a small program installed to make it work.
NOTE: Readers such as: SCR-331, GSR-202, GSR-202V, & GSR-203 could need firmware updates (NO OTHER Readers need firmware updates).
Information about these readers are in Step 2
Step 2: The Mac must be able to 'see' the reader
Plug the CAC reader into an available USB port before proceeding, give it a few moments to install
Step 2a: Click the Apple Icon in the upper left corner of the desktop, select 'About This Mac'
Step 2b: Click the 'More Info' (button)
Step 2c: Click 'System Report...' (button) (Only available in 10.7.x and above; 10.6.x and earlier will not see this window)
Step 2d: Make sure the CAC reader shows in Hardware, USB, under USB Device Tree (See image below). Different readers will show differently, most readers have no problem in this step. See Step 2d1 for specific reader issues.
Step 2d1: Verify firmware version on your SCR-331 or GSR-202, 202V, or 203 CAC reader. If you have a reader other than these 4, GO TO STEP 3
Step 2d1a-SCR-331 reader
If your reader does not look this this, go to the next step.
Below 'Hardware' click 'USB.' On the right side of the screen under 'USB Device Tree' the window will display all hardware plugged into the USB ports on your Mac. Look for “SCRx31 USB Smart Card Reader.” If the Smart Card reader is present, look at 'Version' in the lower right corner of this box: If you have a number below 5.18, you need to update your firmware to 5.25. If you are already at 5.18 or 5.25, your reader is installed on your system, and no further hardware changes are required. You can now Quit System Profiler and continue to Step 3.
Cac Reader For Mac
Step 2d1b-IOGear GSR-202, 202V, and 203 readers
If your reader does not look like these, go toStep 3.
Below 'Hardware' click 'USB.' On the right side of the screen under 'USB Device Tree' the window will display all hardware plugged into the USB ports on your Mac. You should see “EMV Smartcard Reader.” If the Smart Card Reader is present look for 'Product ID' in the lower right corner of this box: If you see: 0x9540, you need to downgrade the firmware to 0x9520. If you see 0x9520, your reader is installed on your system, and no further hardware changes are required. You can now Quit System Profiler and continue to Step 3.
Step 3: Verify which version of OS X is installed on your computer
(You need to know this information for step 6)
Step 3a: Click the Apple Icon in the upper left corner of your desktop and select 'About This Mac'
Step 3b: Look below Mac OS X for: Version 10.X.X.
Step 4: Verify which exact CAC (ID Card) you have
(You need to know this information for step 6)
Look at the back of your ID card (above the black strip) for these card types. If you have any other version than the four shown below, you need to visit an ID card office and have it replaced. All CACs [other than these four] were supposed to be replaced prior to 1 October 2012.
GEMALTO TOP DL GX4 144 | GEMALTO DLGX4-A 144 |
Oberthur ID one 128 v5.5 Dual | G&D FIPS 201 SCE 3.2 |
Find out how to flip card over video
Step 5: Decide which CAC enabler you can / want to use
After installing the CAC enabler, restart the computer and go to a CAC enabled website
Optional Step 6: Update your DoD certificates:
Step 6a. Load the DoD Intermediate certificates into your keychain
then...
Step 6b. If your CAC has a CA between 27 and 32 [and they didn't show up after 5a above] you'll need toinstall all of the CA 27 to 32 and CA Email 27 to 32 certificates manually. You can download the AllCerts.zip (http://militarycac.com/files/maccerts/AllCerts.zip) file, then double click each certificate individually to have them install into the login section of keychain. If you want to verify they are there, follow guidance on the Keychain page. Idea # 2 only.
If you receive Error: 100013, click here for instructions
Mac support provided by: Michael Danberry