You might have to insert a smart card in order for the message to pop-up. Open a terminal (ie konsole, x-term or other) and type/enter. To enable the service: sudo update-rc.d pcscd defaults Testing your Smart Card Driver To start the service in terminal: sudo service pcscd start Check your hardware and search using the key word pcsc. You may have to install additional drivers for your hardware. Without installing any additional drivers the following card readers are tested and work without issue: SCR3310 by SCM Microsystems (Currently being issued to members by the US Army for use on personal computers) SCR3500 by SCM Microsystems (Many members purchase this as a more compact alternative to the SCR3310) O2 Micro, Inc (built-in to many Dell laptops) In Terminal: sudo apt install coolkey Smart Card Reader Driver Note: Coolkey is not able to utilize PIV certificate. If you are not Dual Persona this is by far the best module to use as it is stable, accesses certificates quickly and does not cause the pcsc daemon to hang. The downside is, Dual Persona individuals that have the activated PIV certificate will not be able to access it rendering you not able to access the DoD Enterprise Email certificates. This is arguably the most stable method for accessing your CAC. In Terminal: sudo apt-get install opensc CoolKeyĬoolkey is available through the software repositories. This may be the best option if you are dual persona and do not wish to use CACkey from DISA. The downside is, this module does cause the pcsc daemon to require restarts from time to time. This module is speedy like CoolKey and doesn’t lag like CACkey. This module has a broader feature set than CoolKey or CACkey and you are able to access your PIV certificate for those individuals that are Dual Persona. It facilitates their use in security applications such as mail encryption, authentication, and digital signature. OpenSC provides a set of utilities to access smart cards. In most situations, CoolKey is preferred. You will need to choose which version works best for you. Each have their strengths and limitations.
There are three working modules to access the PKCS #11 keys on your CAC.
The Linux CAC Reader stack is based on a set of middleware called PCSC (Personal Computer Smart Card), written by the MUSCLE (Movement for the Use of Smart Cards in a Linux Environment) project.Įnter this into Terminal and execute: sudo apt install libpcsclite1 pcscd pcsc-tools PKCS #11 module The following is a guide to assist in setting up MX Linux to access CAC-enabled DoD websites. US Department of Defense (DoD) now limits access to many of its websites to be via a smart Common Access Card (CAC) authenticated with a Personal Identification Number (PIN).
0 kommentar(er)
