Windows 10 Smart Card Reader and Military Common Access Card (CAC) Certificate Issues. Fri Dec 12 01 Update ActivClient Step 5: I ws going to try to attach the screenshots I had of everything, but I am unable to do that or put them in text, so hopefully what I have provided is enough. SCM's SCR3310 and SCR3310v2.0 are small and ergonomic USB smart card readers, with backside mounting holes. The readers are ISO 7816 compliant, and can be used for cards in ID 1 card format. Install the driver Insert your CAC into the CAC reader The yellow light on the CAC reader should blink rather than remain a solid yellow If the yellow light blinks on the CAC reader, then the computer has added the smart card as a device and the card will work properly. FIRMWARE UPDATE for SCR-331 Reader.

• Software For Scr3310 Cac Card Reader
• Cac Card Reader Scr3310v2 Driver
• Cac Card Reader Scr3310 Software For Mac

Look below Mac OS X for: Easy to navigate and install Works well with all the indicated hardware BUT Click System, select Device Manager link upper left corner of the screen , scroll down to Smart card readers, select the little triangle next to it to open it up. Find out how to flip card over video. Decide which CAC enabler you want to use.

Update your DoD certificates. Firefox users also follow guidance in 5a below: Pros sdgcz etfvcsvdvcsssvds vzvzhazkjfbnkasbvyis ahfbiasugfkz cwiuvgizguviuzkgfziuycvec zbkdczkuscgaysvgcuyavsjhdhydyiasiisghkjvb asjhbvzjgvcib iasfvzhyv zvsvsdvzvsvdvsvshbfk Cons sdgsdg sdgsdvfgasvg Summary sdgd gdg sdvgzvzvsedvszsavgsv Reply to this review Was this review helpful?

If your reader does not look this this, go to the next step. Push the little yellow folder in the upper right corner of this active window. I can now use CAC card to digitally sign in Adobe, but am no longer prompted to use it to sign into my computer. Scrr3310 or commercial links.

Centrify Express

Sort Date Most helpful Positive rating Negative rating. Plug your CAC reader into your computer before proceeding.

Configure the readed for CAC Authentication. You will eventually start seeing either of the 2 messages shown next. This driver may also be used with the following third party products: Find out how to flip card over video. WinZip- Use the Extract button. I have the latest Smart Card utility update from Windows Update Device Manager shows my card reader is installed and properly functioning.

MilitaryCAC’s Mac OS X Installation Steps Page

Obtain a CAC Reader. I have the same question Thank You for Submitting a Reply,! If you have tried accessing CAC enabled sites prior to following these instructions, please go through this page before proceeding. How do I create a bootable USB drive from an.

Windows 10 Smart Card Reader and Military Common Access Card – Microsoft Community

Select Browse, then desktop or wherever you made the folder. Additional DoD certificate installation instructions for Firefox users.

Once you have the zip file downloaded, open the zip file Windows reaver in zipping program. Clearing the keychain opens a new page. When I use https: I will be reporting this page to the DOD as possible treat to the military network Reply to this review Was this review helpful? Step 2d1a- SCR reader. Update ActivClient Step 5: The firmware update “should” fix the following problems: Once you’ve added all of the certificates Enter the e-mail address of the recipient Add your own personal message: Update the driver present in the “driver” folder by following guidance above.

If it did not install correctly Click Firefox word upper left of your screen. If they need to be trusted manually, that means this should have something wrong with the cert itself or you did not import the DoD certs for those certs. Results 1—2 of 2 1.

This is a guide that is tested to work with Ubuntu and its Derivatives including Linux Mint. Note that not all derivatives were tested.

Preface

Install the Middleware

The Linux CAC Reader stack is based on a set of middleware called PCSC (Personal Computer Smart Card), written by the MUSCLE (Movement for the Use of Smart Cards in a Linux Environment) project.

Enter this into Terminal and execute:

PKCS #11 module

OpenSC

OpenSC provides a set of utilities to access smart cards. It facilitates their use in security applications such as mail encryption, authentication, and digital signature. This module has a broader feature set than CoolKey or CACkey and you are able to access your PIV certificate for those individuals that are Dual Persona. This module is speedy like CoolKey and doesn’t lag like CACkey. This may be the best option if you are dual persona and do not wish to use CACkey from DISA.

sudo apt install opensc

Smart Card Reader Driver

Software For Scr3310 Cac Card Reader

Without installing any additional drivers the following card readers are tested and work without issue: SCR3310 by SCM Microsystems (Currently being issued to members by the US Army for use on personal computers) SCR3500 by SCM Microsystems (Many members purchase this as a more compact alternative to the SCR3310) O2 Micro, Inc (built-in to many Dell laptops)

You may have to install additional drivers for your hardware. Check your hardware and search using the key word pcsc.

Start Up the Daemon

In Terminal:

sudo systemctl start pcscd
sudo systemctl enable pcscd

Testing your Smart Card Driver

Open a terminal (ie konsole, x-term or other) and type/enter. You might have to insert a smart card in order for the message to pop-up.

pcsc_scan

Similar to the following means the card reader is working properly:

PC/SC device scanner V 1.4.18 (c) 2001-2011, Ludovic Rousseau <ludovic.rousseau@free.fr> Compiled with PC/SC lite version: 1.8.8 Using reader plug’n play mechanism Scanning present readers… 0: O2 Micro Oz776 00 00 Sun Mar 24 11:40:07 2013 Reader 0: O2 Micro Oz776 00 00 Card state: Card removed

Similar to this indicates a need to check for additional driver requirements for your hardware:

PC/SC device scanner V 1.4.18 (c) 2001-2011, Ludovic Rousseau <ludovic.rousseau@free.fr> Compiled with PC/SC lite version: 1.8.8 Using reader plug’n play mechanism Scanning present readers… Waiting for the first reader…

Authority Certificates

Download extract and install the DoD Certificates.

The certificates can be obtained from this link:

Make note of the location you stored these certificates

Configure Firefox

Firefox requires manual selection of the PKCS #11 module.

Import Certificates

The current method of installing the certificates is one-by-one. This can be done through Firefox import mechanism.

Firefox 57 and later

Preferences > Privacy & Security
Scroll Down to Security Section
Select View Certificates

Continue for All versions of Firefox

Select the Import… button at the bottom of the dialog and install the following certificates.

• DOD CA-27 through DOD CA-32
• DOD EMAIL CA-27 through DOD EMAIL CA-34,
• DOD EMAIL CA-39 through DOD EMAIL
• CA-44,DOD ID CA-33 through DOD ID
• CA-34,DOD ID CA-39 through DOD ID CA-44,
• DOD ID SW CA-35 through DOD ID SW CA-38,DOD
• ID SW CA-45 through DOD ID SW CA-48
• DoD Root CA 2 through DoD Root CA 4

Set Firefox to Require Selection of Certificate

When accessing multiple CAC protected pages, some pages will require different certificates from the card. Some require the non-email certificate while Enterprise Email will require the email certificate.

Preferences > Privacy & Security
Scroll Down to Security Section
Below the Certificates heading, select the radio button in front of “Ask me every time.”
Set CAC Module

CAC Module Setup

Open Preferences > Privacy & Security
Scroll Down to Security Section
Select Security Devices

Check the left column. It should show an entry similar to “CAC Module” along with certificate(s) as a sub-item. If it doesn’t work then the entries are wrong.
Select the entry and select Unload to remove the security device

To install/reinstall the CAC driver in Firefox using the above listed Security Devices
Select Load on the dialog box

Module name should be something like: DoD CAC

Module filename: either type in or browse to the location of the opensc-pkcs11.so drivers

Example:

/usr/lib/pkcs11/opensc-pkcs11.so

Configure Chrome / Chromium

Unfortunately, Chrome (Chromium) doesn’t automatically recognize the CAC once you’ve completed all the previous steps but it doesn’t take much more work to get Chrome to work with the CAC.

In Terminal:

modutil -dbdir sql:.pki/nssdb/ -add 'CAC Module' -libfile /usr/lib/pkcs11/opensc-pkcs11.so

Make sure that the utility is properly installed, in Terminal:

modutil -dbdir sql:.pki/nssdb/ -list

If it is properly installed there will be an entry with “CAC Module” and details of the library, slot and status. If you were not in your home directory when configuring modutil you will receive an error like:

“modutil: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database.”

Chrome should now be able to utilize the CAC without any issues

Removing CAC Module

Cac Card Reader Scr3310v2 Driver

If you have previously installed libcackey.so and you wish to utilize CoolKey instead, you will have to unload the “CAC Module”: modutil -dbdir sql:.pki/nssdb/ -delete “CAC Module”

Test out your browser

Go to a CAC-enabled web site (www.us.army.mil) and test the CAC login.

Be patient as there may be a delay while authenticating with the CAC.

The PIN and certificate selection authentication process is in the reverse of what you may be used to when using non-Linux machines. Expect to be prompted first for PIN and then certificate selection.

Troubleshooting

At anytime if you don’t seem to get response from the Smart Card, check and see if the daemon is active by executing this in terminal:

pcsc_scan

If you remove and insert your card with no response during the scan, the daemon has crashed.

If you find that the pcsc daemon has crashed you can run this in terminal to restart the daemon:

sudo systemctl restart pcscd

Cac Card Reader Scr3310 Software For Mac

External Links