I need to be able to access websites that require the use of a security card and reader. (i.e Miliary ID)
I've successfully setup my Ubuntu 13.04 PC to do so and wanted to share the steps here.
The card reader used is a SCR3310. It works with no additional set up. If you are using a different card reader you may need to install additional drivers.
#Install packages
sudo apt-get install libpcsclite1 pcscd pcsc-tools
#Install CacKey
Cackey is available at https://software.forge.mil/sf/projects/community_cac
Ironically enough, it requires CAC access to login.
If you cannot access DISA's Forge.mil website, (Because it requires CAC access)
You can Download the 32bit Deb file here.
MD5: 37398d413221b7d6c6ee539978feec47
SHA1: 3ccfc97610b1b3503084caa7f1924c52d2f1a1b4
Or, the 64 bit Deb here.
MD5: 3935d1376ae7175f9814505c59a917f7
SHA1: 153b30d025869679238444e2ef0545ed7185f4f8
Download .deb
Use Software Center to install by double-clicking on the .deb
You will get a warning about the package being of low quality.
Just continue.
After it finishes installing, open a terminal and run pcsc_scan to test the card reader.
*** Note: For 13.10 I had to create a /usr/lib64 directory before CACkey would install.
The command to use is sudo mkdir /usr/lib64 . After creating that directory it installed fine. ***
#Download DoD certs
http://dodpki.c3pki.chamb.disa.mil/rootca.html
Click on each link to download.
You will get warnings about these not being approved, just click "OK"
#Add CAC Module to Firefox as a Security Device
1.Edit > Preferences Menu
2.Advanced Section
3.Certificates Tab
4.Security Devices Button
5.Load Button
In the Dialoge box that pops up enter "CAC Module" as the module name, & enter /usr/lib64/libcackey.so as the module filename.
#Test your set-up
You can test your set-up by logging into a site that requires CAC access such as https://www.us.army.mil
You should be prompted for the "Master Password". This is simply your PIN associated with your card.
For what it's worth this has worked flawlessly for me in 13.04. Even Enterprise E-mail OWA, which I could not get to work under 12.10.
*** Update: Tested with 13.10 works great, including access to OWA. ***
