February 2012 - SmartcardServices-Users

Searching Directory Services for certificates in Lion
by JEFFREY COMPTON 05 Mar '12

05 Mar '12

Is anyone else having trouble with Mail.app in Lion searching directory services for certificates? From command line - it works like a charm - for example -- security find-certificate -e mycoworker(a)ourdomain.org -p > downloadedcert.pem; security import downloadedcert.pem -k login.keychain But from Mail.app - no go. Even searching the contact in the GAL displays the correct cert for the contact. Thanks.

4 4

Storing Keychain data
by SB Tech 04 Mar '12

04 Mar '12

Hi, I looked into using a Smart Card for authentication purposes in my SOHO, but came away disappointed by its interaction with Keychain Access. Specifically, because it took the top position in the Keychain list, it assumed the Login keychain's duties; but because I was unable to store passwords directly on the Smart Card (eg. wifi passwords) I found myself having to authenticate a second time, to the Login keychain. In the meantime, there was no automatic authentication of login services such as connecting to wifi or mounting of secure disk images. So, my question is: how does one go about using a Smart Card to store Keychain Access-specific data, so that the Smart Card "dynamic keychain" can more fully perform the functions required on login? At the moment, I'm not concerned with any particular Smart Card or software solution, I'm more interested in knowing whether it's actually possible. Regards.

5 10

Re: [SmartcardServices-Users] Smart Card Fixes in OS X Lion 10.7.3
by David Emery 10 Feb '12

10 Feb '12

At a minimum, the bug I saw earlier where I couldn't log in if Thursby PKard was installed AND my CAC Card was inserted into the reader is now gone. That's A Good Thing. dave

1 0

Smart Card Fixes in OS X Lion 10.7.3
by John Billings 09 Feb '12

09 Feb '12

Does anyone know exactly what was done in the recent 10.7.3 update to fix smart card login? The update summary says: "Addressed issues when using smart cards to log into OS X". That sounds promising, but a quick test after updating suggests that login is still not working the same as it used to in Snow Leopard. Does something need to be done to enable smart card login? I am glad that Apple is at least addressing this.

1 0