APPLE MACINTOSH COMPUTER SUPPORT PAGE for LEOPARD 10.5.8
Released on 26 October 2007
You may be able to use your CAC with your [Leopard (aka 10.5.8)] Apple computer
Look here for installation steps
Other versions of Mac OS X supported in this website:
Yosemite (10.10) users, utilize the Yosemite support page
Mavericks (10.9.x) users, utilize the Mavericks support page
Mountain Lion (10.8.x) users, utilize the Mountain Lion support page
Lion (10.7.x) users, utilize the Lion support page
Snow Leopard (10.6.x) users, utilize the Snow Leopard support page
Tiger(10.4.x) users, utilize the Tiger support page
If your CAC does not work, you may have received one of the newer PIV II CAC's. You can verify by looking on the back above the black magnetic strip for either of these: "GEMALTO TOP DL GX4 144," "Oberthur ID One 128 v5.5 Dual," "GEMALTO DLGX4-A 144," or "G&D FIPS 201 SCE 3.2." (see below).
Find out how to flip card over video
We're seeing a lower success rate of Leopard computers working with the current CACs, it used to work fine with the older CACs (which were supposed to have been replaced by 1 October 2012).
A 100% success rate fix for Leopard computers with an Intel Chip is to upgrade to Snow Leopard. However, if you have a PPC chip, your only option is to purchase PKard or CSSI, or it may be time for a new computer. :)
IF the lack of Lotus Forms and ApproveIt for Mac "bothers" you, I recommend you contact the Army Publishing Directorate and let them know your thoughts.
Army migrating to Adobe fillable forms. Army Publishing Directorate will begin conversion of the Army's inventory of existing IBM Lotus forms to PDF in the first quarter of FY 14 with a completion by the end of FY 14. Beginning in FY15, Lotus Forms and ApproveIt / eSign software will no longer be supported. This is great news for Mac users since Lotus and ApproveIt has never worked for them. Please know that the current EES system requires Lotus Forms and eSign to allow signing of OERs (currently) and NCOERs (in the future).
How to make the web server "think" your using Internet Explorer
Information on why your CAC may not work with Safari after updating
How to configure your Firefox on your Mac (using Cool key)
The following information is provided for your situational awareness while setting up your CAC on your Mac. It is updated as additional information is available and your input is appreciated for solutions not outlined here. Installation instructions can be found below.
ActivClient is a middleware program used by the DoD to facilitate the communication between your Windows computer and your Common Access Card. It was offered for the “Tiger” release (Mac OS X 10.4.x) and is not compatible with Leopard (the current release of Mac OS X (10.5.8)). The program was available for purchase through the manufacturer, and is not available for download from DoD. The use of this program is not supported here for Apple operating systems, as it is not required and won't work with Leopard (10.5.x).
Lotus Forms is currently only available for Windows. You will have to install Windows in a virtual environment or use Apple's native Boot Camp to be able to use Lotus Forms and ApproveIt. NOTE: Your computer must have an Intel processor.
Windows on your Mac (You MUST have an Intel processor, it will NOT work with a PPC processor): We know you have made a conscious decision to “be a Mac,” but the Government has not, and therefore the easiest solution for some problems, such as: Digitally signing forms with Lotus Forms and ApproveIt, some websites (including digitally signing / encrypting emails in OWA), is to use Windows through a Virtual Machine, such as Parallels Desktop (discounted prices), VMware Fusion, (Parallels vs. VMware comparison), or VirtualBox, or through Apple’s native Boot Camp. This will require you to have a legal copy of Microsoft Windows. With these programs, you can install the ActivClient, Lotus Forms, and ApproveIt software and also utilize all the DoD tools from your Mac. The benefit of the Virtual Machines over Boot Camp is that it will allow you to run Windows as an additional program (without restarting your computer) and keep OS X running the entire time.
Discounted prices on these programs below can be viewed here
NOTE: If your your CAC reader is not being recognized by your virtual Windows, follow this guidance:
VMware Fusion: From the menu bar, select Virtual Machine, then USB. Find your CAC reader and select it.
Parallels Desktop - (In Coherent mode): Click the red parallel lines in the menu bar, Select Devices, USB, find your CAC reader and select it.
Parallels Desktop - (Not in Coherent mode): Simply plug your reader into the computer and select whether you want to use it in Mac or Windows. You may also need to click the word Devices in the top row, USB, then your CAC reader.
VirtualBox: Click the word Devices (at the top of the screen), then USB Devices, and select your CAC reader. When you want to use it on your Mac, go to the same location and remove the checkmark.
* In the VirtualBox GUI, click on USB (small icon in the list of devices).
* Then check "Enable USB Controller" and "Enable USB EHCI controlling."
* Lowest on the beach, you'll see a list of icons to your right. Check first. A box appears "a new filter". Check it.
* By clicking on the icon below, representative of a USB plug with a +, you'll see a list of drivers.
* Select the one that corresponds to your USB drive. Check it added in the filter window.
DTS (Defense Travel System) See the DTS specific page for support
DCO (Defense Connect Online) did NOT work on my 10.5.8 (Leopard) computer.
DoD Root certificates on your Mac only go up to CA 26, so, if your CAC has a CA between 27-32 you need to install all of the CAs 27-32 and CA Email 27-32. You can download the AllCerts.zip file, then double click each certificate in the folder.
CAC Readers: With a variety of CAC readers available today there are also a variety of issues. The SCR series of CAC readers work very well. The SCR-331 reader may need a Firmware Update. See several different models of USB CAC readers here. You will see a small note on some of the readers to show you how to make them compatible with your Mac. Here is a web page that lists all known CAC readers and whether they are supported, should work, or unsupported with the Mac OS'.
Outlook Web Access / App (OWA): The use of OWA on Mac currently has a known issue with time outs. Beware that when using OWA on your Mac that if you are inactive on the primary window, for example: the Inbox, while replying to an email, your browser may time out. On a Windows computer the ActivClient software maintains communications with the server and re-requests validation of your credentials. On a Mac this is not so, Safari will respond to a direct request for validation of your credentials, however it will not re-request that you verify as the server requires. Be sure that prior to selecting the Send button that you copy your work to the clipboard as you will most likely have to restart Safari and log back in. You also will not be able to digitally sign / encrypt / decrypt emails since the S/MIME software is proprietary for Microsoft Internet Explorer (32 bit) only, therefore, it doesn't exist for a Mac.
Internet Explorer Emulation (NOT applicable to OWA): If you visit a website with your Mac that states it can only be accessed via Internet Explorer, or some web pages simply won't work while using your CAC with Safari, please try this: Open Safari, Click on the word Safari (in the bar at the top), select Preferences..., Advanced, click the Show Develop menu in the menu bar box. Close Advanced screen. Now when you need to emulate IE, click on the word Develop (at the top), click User Agent, then select Internet Explorer 7 or 8. This was received from the Air Force IMA JAGs.
Air Force Users look here for some helpful information
Navy Users look here for some specific information
Written by Bill Hankins, Revised by Michael J. Danberry while following the instructions on my own iBook G4.
Another single file for CAC installation instructions for your Mac.
If you are still having problems, contact us
If you have questions or suggestions for this site, contact Michael J. Danberry
Are you interested in subscribing to the CACNews email list?
Last Update or Review: Sunday, 15 February 2015 11:31 hrs
The following domain names all resolve to the same website: ChiefsCACSite.com, CommonAccessCard.us, CommonAccessCard.info, & ChiefGeek.us