military cac for mac no client certificate presented

This lets you save a certificate request to disk and from the contents of this file, you can request the certificate from the issuing CA. This method is not usually recommended in a production environment because it does not scale and has the security risk of exporting the private key.Īn alternative that does not require you to export the private key, is to use the Certificate Assistant tool on the Mac computer, from the Keychain Access menu. However, you can use the following steps in this blog if you need to deploy a few certificates for testing and have Active Directory Certificate Services running on a standalone CA or an enterprise CA that lets you duplicate and modify the certificate templates.īoth methods described in this post involve requesting the certificate from a Windows computer on behalf of the Mac computer, exporting the certificate to a file, and then importing it on the Mac computer.

There is no single method of deployment for this certificate, and we would always recommend that you consult your own PKI team or get in a PKI consultant to devise the best method to deploy this certificate to Mac computers in a production environment. Supported hash algorithms: SHA-1 and SHA-2

Subject: Unique value for each computer (for example, the computer FQDN) The certificate purpose (Enhanced Key Usage): Client authentication For Mac computers, the client certificate requirements are as follows: Much like native mode in Configuration Manager 2007 and the client-server PKI connections in System Center 2012 Configuration Manager, you can use any PKI deployment to deploy the certificate for Mac computers if it adheres to our documented certificate requirements. If you don’t meet these requirements, or you don’t want an automated certificate deployment mechanism, you can request and install the certificate independently from Configuration Manager, and then install the Configuration Manager client. However, it does require the user to have an account in Active Directory, and it requires Active Directory Certificate Services with a customized certificate template (so you must be running an enterprise version of the operating system and an enterprise CA). This deployment method scales well and uses your existing infrastructure to secure and automate the certificate deployment. This tool allows users with an Active Directory account to install the Configuration Manager client and automatically request and install the required client PKI certificate. Most customers who want to manage Mac computers using System Center 2012 Configuration Manager SP1 will use the enrollment tool, CMEnroll. First published on CLOUDBLOGS on Apr 05, 2013

Military cac for mac no client certificate presented