Megavolt, thanks for the reply. I do have all the drivers and middleware installed on Windows 7. My problem is not with accessing the CAC on the Windows side, but to have the CAC accessible by both the Mac host and the Windows VM at the same time. In addition, Centrify DirectControl for Mac OS X has also received the Department of Defense (DoD) Joint Interoperability Test Command (JITC) certification for support of Common Access Cards (CAC) Smart Cards and strong authentication.
SOLUTION FOUND!!!
There is an opensource software called 'Smart Card Manager' which is referenced on militarycac.com as an alternative to using ActivClient 6.2 (AKA for those of us that can't access a CAC secured site to download a program designed to enable the use of a CAC card needed for said site).
I'm not totally sure what the program actually did, however, it seems to have re-established the link between my card reader and my internet browser/certificate management software. Below is the link to the program:
And below is the link to the page on militarycac.com (Also a wonderful resource for anyone military for finding the latest drivers and certificate packs for your computer and card reader)
Finally, make sure (if you're military) that you have all of the appropriate DoD PKI Root Certificates installed and have uninstalled old/conflicting certificates. Instructions for this can be found by clicking the Navy Knowledge Online (NKO) website ( https://wwwa.nko.navy.mil/ ) and clicking the CAC Login Help link below the login button in the center of the page. The link will pop up a window with instructions for things to do on the DISA website. Make sure you complete the following:
- Follow the instructions to run the Cross-Certificate remover (instructions are found in the popup on NKO.
- INSTALL 'Installroot 4' on your machine. To do this choose the 'Trust Store' tab instead of the 'Certificate Validation' tab on the Tools page of the DISA site. 'Installroot 4: NIPR Windows Installer' is the DoD PKI certificate installer that you then need to download and install.
Air Force Cac Reader Middleware
Following all of that, you should be up and running. It's taken me a lot of digging to find this solution and I've done a lot of the working with solutions from militarycac.com in the past and it seems every time windows changes, something about smartcard login on government sites breaks. Hopefully this will save some of the rest of you that headache that we all hate.
*This method has successfully restored my access to all of the military sites I had access to in the past. (MyPay, BUPERS, NFAS, DEERS, NSIPS, NKO, MOVE.MIL) hopefully it works for you as well.
Cac Reader Middleware For Mac
SOLUTION FOUND!!!
There is an opensource software called 'Smart Card Manager' which is referenced on militarycac.com as an alternative to using ActivClient 6.2 (AKA for those of us that can't access a CAC secured site to download a program designed to enable the use of a CAC card needed for said site).
I'm not totally sure what the program actually did, however, it seems to have re-established the link between my card reader and my internet browser/certificate management software. Below is the link to the program:
And below is the link to the page on militarycac.com (Also a wonderful resource for anyone military for finding the latest drivers and certificate packs for your computer and card reader)
Finally, make sure (if you're military) that you have all of the appropriate DoD PKI Root Certificates installed and have uninstalled old/conflicting certificates. Instructions for this can be found by clicking the Navy Knowledge Online (NKO) website ( https://wwwa.nko.navy.mil/ ) and clicking the CAC Login Help link below the login button in the center of the page. The link will pop up a window with instructions for things to do on the DISA website. Make sure you complete the following:
- Follow the instructions to run the Cross-Certificate remover (instructions are found in the popup on NKO.
- INSTALL 'Installroot 4' on your machine. To do this choose the 'Trust Store' tab instead of the 'Certificate Validation' tab on the Tools page of the DISA site. 'Installroot 4: NIPR Windows Installer' is the DoD PKI certificate installer that you then need to download and install.
Following all of that, you should be up and running. It's taken me a lot of digging to find this solution and I've done a lot of the working with solutions from militarycac.com in the past and it seems every time windows changes, something about smartcard login on government sites breaks. Hopefully this will save some of the rest of you that headache that we all hate.
*This method has successfully restored my access to all of the military sites I had access to in the past. (MyPay, BUPERS, NFAS, DEERS, NSIPS, NKO, MOVE.MIL) hopefully it works for you as well.