The Safari Way

Safari is capable of using OS X's Keychain and your CAC to access PKI-enable sites, but no longer appears to function correctly with Thursby Software's software...See more » Safari is capable of using OS X's Keychain and your CAC to access PKI-enable sites, but no longer appears to function correctly with Thursby Software's software to mask the identity certificate. If you are feeling lucky and would like to give Safari a shot at access OWA, or simply only need to access non-OWA PKI-enabled sites, these are the procedures that you'll need. Once again, these procedures still allow us the ability to access PKI-enabled sites, but no longer work for accessing OWA. * If you need to flash your smart card reader, go here * Launch Keychain (Go | Utilities | Keychain Access) * Select (Edit | Keychain List) and change Show: from "User" to "Mac OS X (System)" * Check the "Shared" checkbox for X509Certificates and X509Anchors * Double-click the three *.p7b files previously downloaded for the DoD Root CA * Mount the AFCCertificateControl.dmg image and install the "AFC Control.pkg" (adds "ADmitMac for CAC" pane to System Preferences * Restart the Mac to ensure correct installation of the software with Keychain * Test functionality by inserting CAC in smart card reader and viewing Keychain Access (only two certificates should be viewable) * When successful, continue with the procedures for useSee less »