Questions tagged [cac]

The Common Access Card (CAC) is a United States Department of Defense (DoD) smart card, used for email signing, authentication, and access to DoD computers and networks.

The Common Access Card (CAC) is the standard identification for active-duty military personnel, Selected Reserve, DoD civilian employees, and eligible contractor personnel. It is a smart card that can be used for PKI and PIV purposes. In addition it has a 2D bar code for additional identification.

CAC Developer Resources.

110 questions
0
votes
1 answer

Read data from second smart card reader in web application

Although my question was more than a year ago and did not ever get an answer, I think I may have found a way to do it. When a web application is running and a second CAC is inserted into an additional reader on the PC, ActivClient reads the card…
Dean.DePue
  • 1,013
  • 1
  • 21
  • 45
0
votes
0 answers

Which column datatype to use with MS Access to save a Base64 image?

I know Access 2010 had MEMO column type, however I'm using the 2013 version and I only have Short Text and Long Text, where only Short Text supports Length when editing it in Design View and up to 256. I need something bigger than that for base64…
Gilbert Williams
  • 970
  • 2
  • 10
  • 24
0
votes
1 answer

Error 401.2 with smartcard login for new users with more recent Intermediate certificate

Summary HTTP Error 401.2 - Unauthorized You are not authorized to view this page due to invalid authentication headers. Some new users to my web site cannot log on due to 401.2 and 401.1 errors. Other new users connect without any issue. Users have…
0
votes
1 answer

Links to download DoD certificate authority (CA) certificates

I have found 2 articles on how to configure an Apache web server for CAC card authentication. The 2 articles are https://www.dwheeler.com/essays/apache-cac-configuration.html…
tigger
  • 95
  • 1
  • 2
  • 8
0
votes
1 answer

How to make a certificate that simulates a smart card for IIS site requiring client authentication

I have a project that is a website authenticated with a smart card (DoD CAC). I need to make multiple test certificates that the site can use for client authenticating the session. It seems possible to have a non-smartcard-based certificate that a…
JustSomeGuy
  • 163
  • 2
  • 5
0
votes
0 answers

Is it possible to sign a pdf using the certificate present in a cac card?

I am having a cac card that I am accessing through java code. I am extracting an x509 certificate and now I need to use this cert (or anything else that I can extract from the cac card) to sign a pdf document. Currently, I am using the name and…
dexter
  • 41
  • 1
  • 1
  • 7
0
votes
1 answer

PKCS11 driver for CAC card/ card reader

I have a doubt regarding how to get the pkcs11 driver for interacting with CAC cards .As far as I understood the card reader should provide the driver. I just checked the SCR331 card reader abd they do not seem to have a pkcs11 driver. However the…
Alex Punnen
  • 5,287
  • 3
  • 59
  • 71
0
votes
1 answer

How can PKCS#11 find/read a data object by its "Registered Identifier", "Object Identifier", or "Application Card URL"?

My employer wants me to use a PKCS#11 DLL to read the CHUID record from an older smartcard, which he thinks is a "CAC NG" card. I've found all sorts of information about the CHUID record on those cards... The Registered Identifier (RID, A0 00 00 01…
Head Geek
  • 38,128
  • 22
  • 77
  • 87
0
votes
1 answer

Centos Apache - detect if smart card inserted before going to authentication

I have done a bit of searching on this topic and have not found something showing what I want to do. I am sure that my query is wrong, but don't know how to word it. My VPS is configured with Centos 7, LAMP and OpenSSL 1.0.1e-fips. My domain is…
subcan
  • 2,021
  • 2
  • 18
  • 21
0
votes
1 answer

Connect to a SharePoint site when IIS requires client certificates

I currently have an application developed in C# that helps me in managing permissions on our Share-point 2013 site. Recently, I learned we may be loosing our local instance and moving to another instance that's behind a cac enforced IIS. I have…
0
votes
1 answer

How to validate a Smart/CAC card using input from Precise Biometrics Tactivo

I am able to read a smart card from PB's Tactivo smart card reader on Android, however am not familiar with the validation process. Here is an example of what I have to read the input: ... channel = card.getBasicChannel(); // See…
now_world
  • 940
  • 7
  • 21
  • 56
0
votes
1 answer

Liferay Smart Card CAC Authentication With Liferay 6.1

we are building a website using Liferay and we need to Implement CAC authentication. I put in a ticket with Liferay customer support, but they would not offer a path forward, because they do not "officially" support this feature. Can anyone please…
0
votes
1 answer

Smart card asymmetric key generation

I'm at a dead end in researching how to generate asymmetric keys from a PIV card. I've looked through the NIST sp800-73-3 standards but I am not able to accomplish this. Outlined in part 3 of that document it shows them using INS 47 to do this but I…
nwnoga
  • 577
  • 3
  • 12
  • 22
0
votes
1 answer

ActivIdentity ClientCache: Per Session v. Per Process

Please confirm that I understand these ActivIdentity concepts for a CAC correctly. Per Session: User runs IE and hits an SSL webpage that requires CAC authentication. He authenticates and ... he's in. If the user opens up another tab (another…
Kevin Meredith
  • 41,036
  • 63
  • 209
  • 384
0
votes
1 answer

Wininet SSL with client certificate smart card access for each request

I'm using Wininet library to establish SSL connection with client certificate (stored on the smart card). The problem is that I see smart card is accessed for each HttpRequest that has been sent. From Fidler and wireshark, I see that: 1. all…
Zaky
  • 369
  • 6
  • 21