[SmartcardServices-Users] [Fed-Talk] Updated smartcard installer?

Randall P. Mora randall at avum.com
Wed Oct 17 10:24:25 PDT 2012


Why isn't the CAC Card recognized in Mail.app or any browser.  Notice that CAC-5FFF-7F00-62FF-00F0-B5D3 is being added to the keychain correctly (i.e., security list-keychains).

Oct 17 09:14:35 graphite.local com.apple.SecurityServer[15]: Token reader OmniKey CardMan 3121 00 00 removed from system
Oct 17 09:14:35 graphite.local com.apple.SecurityServer[15]: reader OmniKey CardMan 3121 00 00 removed token "CAC-5FFF-7F00-62FF-00F0-B5D3" (CAC-5FFF-7F00-62FF-00F0-B5D3) subservice 31
Oct 17 09:14:41 graphite.local com.apple.SecurityServer[15]: Token reader OmniKey CardMan 3121 00 00 inserted into system
Oct 17 09:14:45 graphite.local com.apple.SecurityServer[15]: token inserted into reader OmniKey CardMan 3121 00 00
Oct 17 09:14:45 graphite.local com.apple.SecurityServer[15]: reader OmniKey CardMan 3121 00 00 inserted token "CAC-5FFF-7F00-69FF-00F0-0592" (CAC-5FFF-7F00-69FF-00F0-0592) subservice 32 using driver com.apple.tokend.cac
Oct 17 09:15:23 graphite.local com.apple.SecurityServer[15]: Session 100022 created
Oct 17 09:15:23 graphite.local com.apple.security.XPCKeychainSandboxCheck[708]: Can't get dir or base (likely out of memory) for CAC-5FFF-7F00-69FF-00F0-0592
Oct 17 09:16:53 graphite.local sandboxd[725] ([259]): WebProcess(259) deny file-read-data /Library/Preferences/com.apple.security-common.plist


graphite:log rmora$ security list-keychains 
    "CAC-5FFF-7F00-69FF-00F0-0592"
    "/Users/rmora/Library/Keychains/login.keychain"
    "/Users/rmora/Library/Keychains/Microsoft_Intermediate_Certificates"
    "/Users/rmora/Library/Application Support/Adobe/AIR/ELS/com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1/PrivateEncryptedDatak"
    "/System/Library/Keychains/SystemCACertificates.keychain"
graphite:log rmora$ 


when trying to bring up mail:
Oct 17 09:33:38 graphite.local Mail[864]: Using V2 Layout
Oct 17 09:33:38 graphite.local com.apple.SecurityServer[15]: Session 100027 created
Oct 17 09:33:38 graphite.local com.apple.security.XPCKeychainSandboxCheck[866]: Can't get dir or base (likely out of memory) for CAC-5FFF-7F00-69FF-00F0-A581
Oct 17 09:33:44 graphite.local Mail[864]: *** -[IADomainCache init]: IA domains cache is out of date.
Oct 17 09:33:44 graphite.local SyncServer[868]: [0x7ff56940be40] |DataManager|Warning| Client com.apple.Mail sync alert tool path /System/Library/Frameworks/Message.framework/Resources/MailSync does not exist.

THUS the Mail.app will not initialize the ability to digitally sign my emails

then when bring up Safari..
Oct 17 09:34:47 graphite.local sandboxd[878] ([877]): WebProcess(877) deny file-read-data /Library/Preferences/com.apple.security-common.plist
Oct 17 09:34:47 graphite kernel[0]: Sandbox: sandboxd(878) deny mach-lookup com.apple.coresymbolicationd

And can't access the customers CAC enabled site.

Software  OS X 10.8.2 (12C60)
Hardware Overview:

  Model Name:	MacBook Pro
  Model Identifier:	MacBookPro10,1
  Processor Name:	Intel Core i7
  Processor Speed:	2.6 GHz
  Number of Processors:	1
  Total Number of Cores:	4
  L2 Cache (per Core):	256 KB
  L3 Cache:	6 MB
  Memory:	16 GB
  Boot ROM Version:	MBP101.00EE.B02
  SMC Version (system):	2.3f32
  Serial Number (system):	C02HXBMSDKQ5
  Hardware UUID:	0B42596B-3FA9-59DD-814E-AD141081775A



More information about the SmartcardServices-Users mailing list