[ARCHIVED THREAD] - CAC Card Setup (Page 1 of 2)
Posted: 4/16/2012 2:01:46 PM EDT
|
I had to setup my first CAC card today. That was a pain in the butt. the card reader installed just fine. but the certs were messed up and the root cert did not come from a trusted source. 1 hour of fun. I am not in the .mil just support some ANG guys at work and one got a new computer today. I will say it has given me a little respect for the BS red tape you guys have to go through.
I know csb. |
|
getting CA cards working is a major pain in the ass - which is why all our machines came pre-configured from, I think, Dell.
Getting one was hilarious, too, since I don't have fingerprints. It took forever for the little e-print reader to get something good enough to accept. |
|
There are a number of resources on AKO that describe how to set up your CAC reader.
I'm not at work now so I don't have the link we normally give to new guys but it's usually on the first page or two of duplicate and relevant search results on google. The last C in CAC means "card". CAC card is redundant. |
|
Quoted:
Quoted:
I don't have fingerprints. Please elaborate. I work on a biometrics system you may have seen running on a CF74 with a CM300 fingerprint reader and overpriced iris collection device. One of my fellow developers cannot capture their fingerprints due to the features or lack thereof. Naturally this developer doesn't have to do any work on our device support for fingerprint devices. |
|
Quoted: Quoted: What really gets to me is AKO is starting to require CAC cards for more and more things. It makes it harder to do things when at home or out of the office. Go to the PX and buy a CAC reader. Problem solved. I have one, But I can't order my soldiers to go buy one for home use. However, most of the time I bring my laptop to work and let them use it when needed. |
|
Outstanding. I just followed their link to ebay and scored a PCMCIA reader for $7. |
|
Quoted: Quoted: What really gets to me is AKO is starting to require CAC cards for more and more things. It makes it harder to do things when at home or out of the office. Go to the PX and buy a CAC reader. Problem solved. I bought one, but I can't get the damn thing to work. |
|
Quoted:
Quoted:
I don't have fingerprints. Please elaborate. Psoriasis. I have almost no skin on my palms/fingers. Lack of fingerprints is quite common - older people, asian people, post-menopause women, people on many heart medications all tend to have less distinct features. Here's what my hand looks like. |
|
Quoted:
Quoted:
What really gets to me is AKO is starting to require CAC cards for more and more things. It makes it harder to do things when at home or out of the office.
Go to the PX and buy a CAC reader. Problem solved. Screw that! go to the IT guys and get one for free! |
|
Came here to post this. That site has helped me a couple of times when dealing with CAC- related issues. |
|
Quoted:
Quoted:
Quoted:
I don't have fingerprints. Please elaborate. I work on a biometrics system you may have seen running on a CF74 with a CM300 fingerprint reader and overpriced iris collection device. One of my fellow developers cannot capture their fingerprints due to the features or lack thereof. Naturally this developer doesn't have to do any work on our device support for fingerprint devices. Took me months to learn to capture my own iris. Wish I'd kept a bitmap before I got canned. |
|
Quoted:
Quoted:
Quoted:
What really gets to me is AKO is starting to require CAC cards for more and more things. It makes it harder to do things when at home or out of the office.
Go to the PX and buy a CAC reader. Problem solved. Screw that! go to the IT guys and get one for free! And I tell people I'm S6 not S4, Im not the mouse, CAC reader, keyboard or printer fairy. I maintain the network, fuck I don't have any printer cartridges my damn self, that why I'm networked to the S3 printer lol. But Military CAC is the answer to all your CAC questions, like how to get everything from your home laptop to your iPhone CAC enabled. Everything is CAC enabled because just like Palins Yahoo account, most peoples security questions are not secure in the age of Facebook. Too much info is available to string together to get what the bad guys want. And a $20 CAC reader is cheaper than gas to run into the office on a weekend to sign that NCOER you should have signed before Friday. When one has access to everything from your pay to your medical records in one stop shopping youd think people would be all about securing it. |
|
Quoted:
Quoted:
What really gets to me is AKO is starting to require CAC cards for more and more things. It makes it harder to do things when at home or out of the office.
Go to the PX and buy a CAC reader. Problem solved. Until you have to set it up. What a PITA. Posted Via AR15.Com Mobile |
| I used the site http://militarycac.com/ however didn't have it at home to post the link. The card reader and card worked great. BTW why is your SSN on your ID card? But the card and reader was the easy part. it was the DOD cert that was the pain. I had to import the cert and make the computer trust it as a ca. Our computers are pretty locked down. so it was a pain evening with admin access. |
|
Quoted:
Quoted:
Quoted:
What really gets to me is AKO is starting to require CAC cards for more and more things. It makes it harder to do things when at home or out of the office.
Go to the PX and buy a CAC reader. Problem solved. Screw that! go to the IT guys and get one for free! Not in my unit. I don't have any. ETA: I am the IT guy. |
|
Quoted:
I used the site http://militarycac.com/ however didn't have it at home to post the link. The card reader and card worked great. BTW why is your SSN on your ID card? But the card and reader was the easy part. it was the DOD cert that was the pain. I had to import the cert and make the computer trust it as a ca. Our computers are pretty locked down. so it was a pain evening with admin access. This is in the process of being changed. Removal of SSNs from DoD ID Cards |
|
Quoted:
Quoted:
I used the site http://militarycac.com/ however didn't have it at home to post the link. The card reader and card worked great. BTW why is your SSN on your ID card? But the card and reader was the easy part. it was the DOD cert that was the pain. I had to import the cert and make the computer trust it as a ca. Our computers are pretty locked down. so it was a pain evening with admin access. This is in the process of being changed. Removal of SSNs from DoD ID Cards Which works right up until you go to the DFAC and they still want your SSN. 
|
|
Quoted:
Came here to post this. That site has helped me a couple of times when dealing with CAC- related issues. Same here. Great resources, at least points you in the right direction and to the .mil sites for getting most everything you need. |
|
Quoted: There are a number of resources on AKO that describe how to set up your CAC reader. I'm not at work now so I don't have the link we normally give to new guys but it's usually on the first page or two of duplicate and relevant search results on google. The last C in CAC means "card". CAC card is redundant. True, but most people say it anyway.  |
|
Is this webpage available in English? |
|
Quoted: Quoted: Your unit will give you a CAC reader.Quoted: What really gets to me is AKO is starting to require CAC cards for more and more things. It makes it harder to do things when at home or out of the office. Go to the PX and buy a CAC reader. Problem solved. ours are required they were provided by supply I bought my own because I didn't want a USB one - got a PCI Express card reader and it kicks ass |
|
Quoted:
Quoted:
Quoted:
I used the site http://militarycac.com/ however didn't have it at home to post the link. The card reader and card worked great. BTW why is your SSN on your ID card? But the card and reader was the easy part. it was the DOD cert that was the pain. I had to import the cert and make the computer trust it as a ca. Our computers are pretty locked down. so it was a pain evening with admin access. This is in the process of being changed. Removal of SSNs from DoD ID Cards Which works right up until you go to the DFAC and they still want your SSN. Haven't seen a chow hall in the last 20 years that needed a full SSN. What I have noticed in the 6ish months of having a CAC without an SSN is that all the places that were used to just using a CAC and signing you up for something now have to ask for your SSN. Go to finance...gimme your ID card....finance clerk is like fuck, take your card back what is your SSN. Same for signing up space-a for flights. |
|
Quoted:
Is this webpage available in English? Chief, just go to AKO, it is located there as CAC resources. It looks a bit easier to read than the milcac website. Still...all a CAC needs to set up is, drivers, Active Client, Approve It, Certificates, and forms program of choice. Pretty easy on a personal computer. Like pulling teeth on a government computer. |
|
Quoted:
Win7 doesn't even need ActivClient. Smart card readers work natively. What am I doing wrong? Both my 64 bit and 32 bit Windows 7 laptops needed it. Have it running on my 64 bit computer now while on AKO. OR, was I a slave to the directions and installed it without needing it? |
|
Quoted:
What really gets to me is AKO is starting to require CAC cards for more and more things. It makes it harder to do things when at home or out of the office.
As someone who spent years defending our networks, I can truthfully say there's a damn good reason for that. You'd get farther if you complained about gate guards slowing traffic. |
|
Quoted:
Quoted:
Is this webpage available in English? Chief, just go to AKO, it is located there as CAC resources. It looks a bit easier to read than the milcac website. Still...all a CAC needs to set up is, drivers, Active Client, Approve It, Certificates, and forms program of choice. Pretty easy on a personal computer. Like pulling teeth on a government computer. You have much more patience than I do and as of March, I can no longer go to AKO on my own computer, I am TDY where I think I might find someone smart enough to make this shit work, If I can't, then dont ask me to monitor AKO when I'm not on duty as this shit is just unreasonably difficult to monitor on weekends. We can make this shit so secure only those from the G6 can access it, which is where I'm at now. I can access AKO at work only. |
|
Quoted:
Quoted:
Your unit will give you a CAC reader.Quoted:
What really gets to me is AKO is starting to require CAC cards for more and more things. It makes it harder to do things when at home or out of the office. Go to the PX and buy a CAC reader. Problem solved. The last time a unit issued me a CAC reader I was in the Navy. That was 6 years ago. Farmers Fight! backbencher |
|
Quoted:
Quoted:
Quoted:
Is this webpage available in English? Chief, just go to AKO, it is located there as CAC resources. It looks a bit easier to read than the milcac website. Still...all a CAC needs to set up is, drivers, Active Client, Approve It, Certificates, and forms program of choice. Pretty easy on a personal computer. Like pulling teeth on a government computer. You have much more patience than I do and as of March, I can no longer go to AKO on my own computer, I am TDY where I think I might find someone smart enough to make this shit work, If I can't, then dont ask me to monitor AKO when I'm not on duty as this shit is just unreasonably difficult to monitor on weekends. We can make this shit so secure only those from the G6 can access it, which is where I'm at now. I can access AKO at work only. I find the "one stop shop" at militarycac to be pretty easy to follow. 1-7 on one page and you are done. Some formatting at the site is lacking but if you have problems pretty much every troubleshooting scenario or problem is covered. Chief Danberry who created the site and pours his personal time into it did a good job addressing common problems that you can't find through AKO and their support site. If you have some impossible to solve problem with your CAC that still won't work after following his instructions you can contact him directly: http://militarycac.com/aboutme.htm Scroll down and hit the contact link. |
|
Quoted:
Quoted:
Win7 doesn't even need ActivClient. Smart card readers work natively. That's what I've read, too. I tried without ActivClient. No Go. I tried with Active Client. No Go. I spent ~7hrs troubleshooting and playing with it, but eventually gave up. The no middleware doesn't work with some older cards, but they should be about out of circulation by now. There's one error I've gotten, even after using the cert update utility. When logging on to the AF Portal it gives some CA error. A quick google of the error and militarycac has the answer with step by step how to fix. |