On Feb 24, 2011, at 3:46 PM, Will Coleman wrote:
Frankly, I don’t have a need to see the PIV cert on the mac, I’m fine with the CAC token and that works just fine, I just want to setup a consistent architecture that I can test on both Win7 and Mac, and I posed a separate question to you in the previous email about disabling Win7 mini-driver architecture to see if that might work (in addition to killing the AC software, but I’m supposing that will hose the Win7 machine to see NOTHING. But, again, I’m not sure here.
You should be able to suppress the Win7 PIV minidriver and use the AC middleware. This *should* work just by installing AC, but it may be that it depends which modifies the registry hive last, and you might find yourself in a position where WSUS has stomped over AC and the PIV minidriver takes over. I'd have to ask one of the AF PKI SPO's integration engineers to be certain what's safe; I know they've addressed this situation in the recent past. -- T