Use of a Common Access Card

Use a typical Access Card (CAC) on a private pc running Windows, Mac OS X, or Linux

A Common Access Card (CAC) could be an open-end credit issued by the Department of Defense (DoD) to civilian staff, military personnel, and contractors. These cards, that contain user certificates, facilitate shield knowledge and limit access by providing two-factor authentication to DoD systems, networks, applications, and websites. The DoD utilizes a way referred to as Public Key Infrastructure (PKI) to implement and enforce the utilization of sensible cards - that contain user certificates - and private identification numbers (PINs) for two-factor authentication. several users can ne'er perceive or appreciate the complexness that works behind the DoD's PKI. Nor can users absolutely perceive why their CACs (smart cards) don't seem to be working on a private pc (PC) whereas employing an open-end credit reader alone. Often, CAC-holders are misled by retailers into the basic cognitive process that they will use their CACs by merely inserting it into a "plug-and-play" card reader. thanks to the character of PKI, it takes a bit additional effort to Public Key alter (PKE) a pc. apart from having an enclosed or external open-end credit reader to use a CAC, the pc has to have the hardware drivers, the sure root chains (of the user's certificates), and presumably even third-party middleware.

While employing a CAC on a computer might not be as simple as "plug-and-play," DoD agencies and contractors have spent extensive resources to form the method as straightforward and cheap as attainable, not only for system directors, except for general users additionally. directions and the majority downloads (with the exception of third party middleware) area unit accessible through the knowledge Assurance Support surroundings (IASE) website hosted by the Defense info Systems Agency (DISA). On the IASE website, DISA hosts a PKI-PKE subdivision titled, obtaining Started for finish Users (external link). There, users can realize directions and downloads for sanctionative their Windows, Mac, or UNIX operating system computers.

Third party middleware, like ActivID ActivClient, isn't needed on Windows seven or later versions of Windows. solely Windows XP, Vista, or earlier Windows OS versions need middleware. If ActivClient is needed on the associated package, personnel will sometimes acquire a free copy from their agency's support table or facility. instead, raincoat OS X users will acquire middleware for gratis from raincoat OS forge or Centrify (external links). Thus, there's no ought to purchase middleware in spite of what form of package runs on a computer.