Chrome/Chromium on Linux cannot see the CAC

linux

Symptoms

Firefox works after loading the PKCS#11 module but Chrome still does not prompt for a certificate.

Likely cause

Chrome uses the per-user NSS database (~/.pki/nssdb); the module must be registered there too.

Fix

1. sudo apt-get install libnss3-tools (Debian/Ubuntu) or distro equivalent. 2. In a terminal in your home directory: modutil -dbdir sql:.pki/nssdb/ -add "CAC Module" -libfile /usr/lib64/libcoolkeypk11.so (use /usr/lib for 32-bit). 3. Verify: modutil -dbdir sql:.pki/nssdb/ -list. Should list 'CAC Module'. 4. If you get 'SEC_ERROR_BAD_DATABASE', you ran the command from outside your home directory - cd ~ and rerun.

Sourced from militarycac.com. Rewritten for clarity.

Didn't work, or need it tailored to your setup?

Ask the AI assistant