SmartCardServices has largely been superseded in Sierra by the Crypto token kit API’s. Many smartcards and readers are natively supported in Sierra, but there are notable differences. For example, if you are looking for the smart card to show in the Keychain the way it used to it doesn’t. We are still using some applications that rely on that function and so we are using the free centrify tokend module. Depending on what you need, you should evaluate using the API’s as by in large they are a more reliable/stable experience assuming they do everything you need. __________________________________________________ Will Jorgensen IT Engineer Feedback helps us grow! -----Original Message----- From: <smartcardservices-users-bounces@lists.macosforge.org> on behalf of Paige Kinney <pkinney@patchplusconsulting.com> Date: Wednesday, March 29, 2017 at 11:22 AM To: "smartcardservices-users@lists.macosforge.org" <smartcardservices-users@lists.macosforge.org> Subject: [SmartcardServices-Users] OS Sierra I see this question has been asked but there are no archived answers. Where do I find smart card services for S Sierra? Thanks Paige _______________________________________________ SmartcardServices-Users mailing list SmartcardServices-Users@lists.macosforge.org https://lists.macosforge.org/mailman/listinfo/smartcardservices-users
On 4/3/17, 2:59 PM, "smartcardservices-users-bounces@lists.macosforge.org on behalf of Jorgensen, Will A" <smartcardservices-users-bounces@lists.macosforge.org on behalf of Will@pnnl.gov> wrote: SmartCardServices has largely been superseded in Sierra by the Crypto token kit API’s. True, and it means that Safari and Apple Mail (but nothing else!) on Sierra should work with the smartcards with no extra software/middleware. For example, if you are looking for the smart card to show in the Keychain the way it used to it doesn’t. Yes, and it indicates a worse problem: no application that relies on the old CDSA (did I get the acronym right? () architecture works. That means: MS Office apps won’t even see the smartcard, Adobe Acrobat won’t be able to sign anything using your token, and on top of that - any app that required PKCS#11 interface (OpenSSL-based apps, Java apps, etc). The only solution at this time is to install extra middleware that speaks CDSA and/or provides PKCS#11 interface. OpenSC is one of such packages. Thursby PKard will provide CDSA (so MS Office and Adobe Acrobad would work). I’ve been told that Centrify would provide both, but haven’t tried it. We are still using some applications that rely on that function and so we are using the free centrify tokend module. Some apps (like MS Office) are OK when tokend is available. Others (Java) require PKCS#11 interface – tokend won’t help there. ‘ -----Original Message----- From: <smartcardservices-users-bounces@lists.macosforge.org> on behalf of Paige Kinney <pkinney@patchplusconsulting.com> Date: Wednesday, March 29, 2017 at 11:22 AM To: "smartcardservices-users@lists.macosforge.org" <smartcardservices-users@lists.macosforge.org> Subject: [SmartcardServices-Users] OS Sierra I see this question has been asked but there are no archived answers. Where do I find smart card services for S Sierra? Thanks Paige _______________________________________________ SmartcardServices-Users mailing list SmartcardServices-Users@lists.macosforge.org https://lists.macosforge.org/mailman/listinfo/smartcardservices-users _______________________________________________ SmartcardServices-Users mailing list SmartcardServices-Users@lists.macosforge.org https://lists.macosforge.org/mailman/listinfo/smartcardservices-users
For some reason the link isn’t on the smartcard services page, but it is there: https://github.com/smartcardservices/smartcardservices/releases/download/2.1... If using it for PIV, note that that the 10.12 package appears to be an older compiled version of the PIV.tokend that does not have new the new changes for on-card key history support and also probably missing the fix for a decryption bug when using it with Outlook 2016. Those features have since been added/fixed in this source: https://github.com/smartcardservices/smartcardservices/tree/master/Tokend/PI... -Ridley On 4/3/17, 3:14 PM, "smartcardservices-users-bounces@lists.macosforge.org on behalf of Blumenthal, Uri - 0553 - MITLL" <smartcardservices-users-bounces@lists.macosforge.org on behalf of uri@ll.mit.edu> wrote: On 4/3/17, 2:59 PM, "smartcardservices-users-bounces@lists.macosforge.org on behalf of Jorgensen, Will A" <smartcardservices-users-bounces@lists.macosforge.org on behalf of Will@pnnl.gov> wrote: SmartCardServices has largely been superseded in Sierra by the Crypto token kit API’s. True, and it means that Safari and Apple Mail (but nothing else!) on Sierra should work with the smartcards with no extra software/middleware. For example, if you are looking for the smart card to show in the Keychain the way it used to it doesn’t. Yes, and it indicates a worse problem: no application that relies on the old CDSA (did I get the acronym right? () architecture works. That means: MS Office apps won’t even see the smartcard, Adobe Acrobat won’t be able to sign anything using your token, and on top of that - any app that required PKCS#11 interface (OpenSSL-based apps, Java apps, etc). The only solution at this time is to install extra middleware that speaks CDSA and/or provides PKCS#11 interface. OpenSC is one of such packages. Thursby PKard will provide CDSA (so MS Office and Adobe Acrobad would work). I’ve been told that Centrify would provide both, but haven’t tried it. We are still using some applications that rely on that function and so we are using the free centrify tokend module. Some apps (like MS Office) are OK when tokend is available. Others (Java) require PKCS#11 interface – tokend won’t help there. ‘ -----Original Message----- From: <smartcardservices-users-bounces@lists.macosforge.org> on behalf of Paige Kinney <pkinney@patchplusconsulting.com> Date: Wednesday, March 29, 2017 at 11:22 AM To: "smartcardservices-users@lists.macosforge.org" <smartcardservices-users@lists.macosforge.org> Subject: [SmartcardServices-Users] OS Sierra I see this question has been asked but there are no archived answers. Where do I find smart card services for S Sierra? Thanks Paige _______________________________________________ SmartcardServices-Users mailing list SmartcardServices-Users@lists.macosforge.org https://lists.macosforge.org/mailman/listinfo/smartcardservices-users _______________________________________________ SmartcardServices-Users mailing list SmartcardServices-Users@lists.macosforge.org https://lists.macosforge.org/mailman/listinfo/smartcardservices-users
Thank you!
On Apr 3, 2017, at 2:59 PM, Jorgensen, Will A <Will@pnnl.gov> wrote:
SmartCardServices has largely been superseded in Sierra by the Crypto token kit API’s. Many smartcards and readers are natively supported in Sierra, but there are notable differences. For example, if you are looking for the smart card to show in the Keychain the way it used to it doesn’t. We are still using some applications that rely on that function and so we are using the free centrify tokend module. Depending on what you need, you should evaluate using the API’s as by in large they are a more reliable/stable experience assuming they do everything you need.
__________________________________________________ Will Jorgensen IT Engineer
Feedback helps us grow!
-----Original Message----- From: <smartcardservices-users-bounces@lists.macosforge.org> on behalf of Paige Kinney <pkinney@patchplusconsulting.com> Date: Wednesday, March 29, 2017 at 11:22 AM To: "smartcardservices-users@lists.macosforge.org" <smartcardservices-users@lists.macosforge.org> Subject: [SmartcardServices-Users] OS Sierra
I see this question has been asked but there are no archived answers. Where do I find smart card services for S Sierra? Thanks Paige _______________________________________________ SmartcardServices-Users mailing list SmartcardServices-Users@lists.macosforge.org https://lists.macosforge.org/mailman/listinfo/smartcardservices-users
participants (4)
-
Blumenthal, Uri - 0553 - MITLL
-
Disiena, Ridley (MSFC-IS90)[EAST2]
-
Jorgensen, Will A
-
Paige Kinney