Firefox on macOS 10.12+ does not authenticate with CAC

macos

Symptoms

After installing certs and enabling native smart card, Firefox still fails to authenticate.

Likely cause

Firefox does not consume the CryptoTokenKit pivtoken; it needs a third-party PKCS#11 module.

Fix

1. Install CACKey from militarycac.com/cacenablers.htm. 2. In Firefox, Preferences > Privacy & Security > Security Devices > Load > point at the CACKey module. 3. Restart Firefox. 4. If Firefox is still broken, use Safari or Chrome - they use the native token.

Sourced from militarycac.com. Rewritten for clarity.

Didn't work, or need it tailored to your setup?

Ask the AI assistant