[SmartcardServices-Users] Adobe and PKCS11 Module

[Shawn A. Geddis]

On Mar 25, 2010, at 11:10 AM, Mueller, David S CIV SPAWARSYSCEN-PACIFIC,	55620 wrote:
> I've never tried using Acrobat Professional or 10.6, but with Adobe Reader and 10.5, I never got smart card support working on OS X before Reader 9.0.  Starting with Reader 9.1, you don't need to add a PKCS#11 module as they use the system Keychain.
> 
> If you're trying to use a DoD CAC/PIV card, you'll also need to load the DoD PKI certificates, as outlined in the post you linked.
> 
> - David


David,

It is true that earlier versions of Acrobat required PKCS#11 and current versions utilize Apple's built-in Security Services (inculding keychains), but they do not use the "System" keychain as noted.  They access your supported Smart Card as a Keychain via the APIs, but the System Keychain is a separate keychain altogether.

> If you're trying to use a DoD CAC/PIV card, you'll also need to load the DoD PKI certificates, as outlined in the post you linked.

There is no need to ever "load the DoD PKI certificates" to use the CAC-NG, unless you are referring to the newest Intermediate CAs that were just published and not yet included in a Software Update for Mac OS X.
DOD CA-25, DOD CA-26, DOD EMAIL CA-25, DOD EMAIL CA-26

Adding the "SystemCACertificates.keychain" to the Keychain list (which already ships with Mac OS X) gives you all of the other Intermediate CA Certs used within DoD.
/System/Library/Keychains/SystemCACertificates.keychain

-Shawn
__________________________________________________
Shawn Geddis				  			   geddis at mac.com
Security Consulting Engineer				   geddis at apple.com

MacOSForge Project Lead:                           Smart Card Services                                                                 
	Web:	http://smartcardservices.macosforge.org/
	Lists:	http://lists.macosforge.org/mailman/listinfo
__________________________________________________

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/smartcardservices-users/attachments/20100326/5ffc9863/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3864 bytes
Desc: not available
URL: <http://lists.macosforge.org/pipermail/smartcardservices-users/attachments/20100326/5ffc9863/attachment-0001.bin>