Pre-requisites
Step 1: Attach your USB CAC reader, but don’t put the card in just yet.
Step 2: Install Centrify Express by double clicking the DMG file you downloaded.
Step 3: Once the installation completes, the “Centrify Express for Smart Card” tool pops up. This tool shows the status, drivers, and diagnostics. You can minimize it and continue with the configuration.
Step 4: Open Applications and go to the Utilities folder then double click Keychain Access.
Step 5: Select File -> Add Keychain. Click the keychains drop down and select hard drive -> System -> Library -> Keychains. Select SystemCACertificate.keychain then click add.
Step 6: Repeat steps 4 and 5 to install SystemRootCertificates.keychain file as well.
Step 7: Insert your CAC and run the Centrify Express Card Validator Tool that was minimized in Step #3. Your CAC reader lights should blink a few times depending on model. Wait until the lights stop flashing.
Step 8: Verify that your smart card appears in the keychain using the Keychain tool.
Step 9: Click “Run” button in the diagnostics tab.
Step 10: The tool output may “spin” for a minute, and then prompt you to enter your CAC PIN.
Step 11: Enter your PIN and click “OK”. It may prompt you for your PIN several times to unlock each individual certificate on your CAC.
Step 12: You will see output in the Centrify Diagnostics window as Centrify reads each certificate. If you see your name and a valid “CN” in the output, your CAC is successfully read. If you see any errors click Save to desktop for diagnosis.
Step 13: You have completed the CAC configuration. You can now use your CAC for sites that require it using Chrome or Safari. Firefox will not work as it is not natively configured to read Mac’s Keychain.
Step 14: The ICAM Whitepages application requires CAC, which you can use to test:
https://whitepages.noaa.gov.