Apple Federal Smart Card Package - Manual (Page 4)

4 FSCP Installation and Setup Guide
Starting Authentication With the Common Access Card
To start using the Common Access Card to authenticate access to the computer, execute this
command in Terminal (as root):
cac_setup
To stop authentication using the card and restore the standard Mac OS X authentication,
execute this command:
cac_setup -off
Authenticating With the Common Access Card
You can now use the Common Access Card to gain access to the computer.
To log in to the computer the first time using the card:
1 Users should be connected to the network so that FSCP can access any Certificate
Revocation Lists (CRLs) needed to verify certificates.
To see where the CRLs are located, check the URI field in the Certificates pane of ReadCAC
for a certificate.
2 Insert the card and type the PIN in the dialog.
An “X” appears below the PIN text box for each time you type an incorrect PIN since the
Common Access Card was inserted. If you exceed the maximum number of times you can
enter an incorrect PIN (3), your card is locked. See your administrator if your card is locked.
Note: If you need to log in using your password instead of a smart card, click the Other
button in the login window and type your user name and password.
To authenticate access to the computer using the Common Access Card later:
When a message asks you to authenticate (for example, when you’re changing a setting in
System Preferences), insert your card and type the PIN for the card.
Because it takes place on the smart card, authentication takes longer than when you use a
password.
Sphinx Page 4 Tuesday, January 14, 2003 12:53 PM