APPLE MACINTOSH CAC ENABLER (aka MIDDLEWARE) PAGE
Follow Tables 1 through 4 below:
PLEASE READ the preliminary notes before you start:
Preliminary NOTE1: Restart your computer after installing the CAC enabler before trying to access the CAC enabled site
Preliminary NOTE2: Installing multiple enabling programs will cause your system to NOT work. Here's how to uninstall CAC enablers
Preliminary NOTE3: Some of the CAC enablers below will ask for a "keychain password," it is asking for your CAC PIN. Make sure if it asks for your Keychain password after you select your CAC certificate, that you use your CAC [6-8 digit / all number] PIN.
If you block your CAC, you'll have to visit an ID card office to get it unblocked. Unfortunately, only one of the programs below has the capability to show you when your CAC is blocked.
Table 1: See which CAC enabling program will work with your version of OS X
Once you've decided, go to Table 2
Note1: Computer must have an Intel processor, will not work with a PPC processor
Table 2: Verify the CAC enabling program you selected above will work with your specific CAC.
Once you've verified it will work, go to Table 3.
Note1: I haven't tested the "G&D FIPS 201 SCE 3.2" CAC yet with these enablers. If you have one and have tested with the question marked enablers above, please contact me
Note2: SmartCard Service update for OS X 10.9.x will ONLY work with the Gemalto TOPDLGX4 144 & G&D FIPS 201 SCE 3.2 CACs. Oberthur 5.5 & Gemalto GX4-A 144 users will need to utilize a different CAC enabler.
Table 3: Now verify the CAC enabling program you selected in steps 1 and 2 is:
a. Compatible with Firefox (if you plan to use this web browser)
b. Will read your PIV cert (for Dual Persona users), or
c. You want support from the vendor.
Once you've decided, go to Table 4 and select the link to the CAC enabler you decided you want to use.
Note1: PIV cert has to already be activated.
Note2: Will read without having to activate PIV cert
Note3: Will work with the paid version of Centrify User Suite
Table 4: Click link below for the CAC enabler you decided you want to use based on tables 1-3 above.
Specifics for the following versions of Mac OS X can be found at these links:
Yosemite (10.10) users, utilize the Yosemite support page
Mavericks (10.9.x) users, utilize the Mavericks support page
Mountain Lion (10.8.x) users, utilize the Mountain Lion support page
Lion (10.7.x) users, utilize the Lion support page
Snow Leopard (10.6.x) users, utilize the Snow Leopard support page
Leopard (10.5.x) users, utilize the Leopard support page
Tiger(10.4.x) users, utilize the Tiger support page
The four (4) current CAC Types are...
Look at the back of your ID card (above the black magnetic strip) for one of the examples below. If you have any other versions, you need to visit an ID card office and have it replaced. All CACs other than these shown below were to be replaced prior to 1 October 2012.
Find out how to flip card over video
Information / download links
Version 1.5 (and above) supports OS 10.9.x & 10.10 and will read the PIV cert for dual persona personnel
Purchase PKard from Thursby Software or TX Systems
Thursby offers US phone, email and forums support for the software they've been developing for over 7 years and is 100% made in the USA
. You may be able to setup your GEMALTO TOP DL GX4 144, or GEMALTO DLGX4-A 144 CAC on your Mac WITHOUT PKard
NOTE: Oberthur ID One 128 v5.5 Dual CAC holders (DO NOT follow guidance below, because it will NOT work for you)
G&D FIPS 201 SCE 3.2 CAC is unknown for this package (If you have one of these CACs, please contact me)
Use JAX's Automated PACKAGE, to perform the steps below
Once you run this file and have restarted your computer, Click here to continue
You can also install the files manually by following these instructions (for those of you who want to know what JAXs package is really doing to your computer):
Once downloaded, click on the download arrow in the upper right corner of your Safari browser
Right click each of the two files: CACNG.tokend & CAC.tokend and select Show in Finder
From the Downloads / Finder folder, drag the files to:
<your hard drive> / System / Library / Security / tokend /
NOTE: (IF the "tokend" folder is not there, create it by Right clicking and selecting New Folder, or for a one button mouse, select <ctrl> and click your mouse button).
NOTE: You may receive a message [like below], you'll need to select "Authenticate" and enter your computer administrator password to move these files.
Now verify it worked by visiting: Keychain Access
Here's How: Click: Go (in the taskbar at the top of the screen), Utilities, Keychain Access.app
NOTE: If you don't see Go, click the finder icon in your Dock. Click Utilities, Keychain Access.app
You "should" see CAC...###-### under Keychains, you may also see your last name with your EDI-PI after it, or PIV II (it depends on which program you are using to communicate with your CAC.
You "should" now be able to visit CAC enabled websites
If you are still having problems, contact us.
If you have questions or suggestions for this site, contact Michael J. Danberry
Are you interested in subscribing to the CACNews email list?
Last Update or Review: Sunday, 15 February 2015 11:25 hrs
The following domain names all resolve to the same website: ChiefsCACSite.com, CommonAccessCard.us, CommonAccessCard.info, & ChiefGeek.us