Skip to content

Commit 06b4d5a

Browse files
committed
Update for testing OTG adapter
1 parent b1d1e80 commit 06b4d5a

1 file changed

Lines changed: 27 additions & 18 deletions

File tree

_posts/2023-07-09-ios-cac-enabled.md

Lines changed: 27 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -7,32 +7,41 @@ output:
77
html_document:
88
keep_md: true
99
comments: True
10-
tags: [Army, iOS]
10+
tags: [Army, Military, CAC, iOS, iPadOS, CryptoTokenKit]
1111
---
1212

13-
iOS 16 natively supports smart card readers and your Common Access Card (CAC) through the CryptoTokenKit extension.
14-
Previously, [militarycac.com](https://militarycac.org/mobile.htm) recommended utilizing expensive software and hardware
15-
from third party sites to use CAC-enabled websites on your iOS device. Now all you need is an adapter
16-
([1](https://www.apple.com/shop/product/MD821AM/A/lightning-to-usb-camera-adapter),
17-
[2](https://www.apple.com/shop/product/MK0W2AM/A/lightning-to-usb-3-camera-adapter))
18-
to access websites such as [webmail](https://webmail.apps.mil/mail/), [HRC](https://webmail.apps.mil/mail/),
19-
[DTS](https://www.defensetravel.osd.mil/), etc. You will need to download the
20-
[Certificate Authority certificates](https://public.cyber.mil/announcement/new-dod-pki-cas-released/) onto your
21-
iOS device and open the `dod_pke_chain.pem` file within the zip file. You will install them on your iPhone by clicking
22-
it, then navigating to your `Settings->Profile Downloaded->Install`. Recommend you always verify the certificates are
23-
authentic by following the instructions in the README included in the zip file.
13+
iOS/iPad OS natively support smart card readers and authentication using your Common Access Card (CAC)
14+
through the [CryptoTokenKit](https://developer.apple.com/documentation/cryptotokenkit) framework.
15+
You no longer need to utilize expensive software or hardware devices previously required from third party
16+
sites to use CAC-enabled websites on your Apple mobile devices. Now all you need is an On The Go (OTG) adapter
17+
([1](https://www.apple.com/shop/product/MD821AM/A/lightning-to-usb-camera-adapter),
18+
[2](https://www.apple.com/shop/product/MK0W2AM/A/lightning-to-usb-3-camera-adapter),
19+
[3](https://www.amazon.com/apple-lightning-usb-camera-adapter/s?k=apple+lightning+to+usb+otg+adapter))
20+
to access websites such as [webmail](https://webmail.apps.mil/mail/), [HRC](https://www.hrc.army.mil/),
21+
[DTS](https://www.defensetravel.osd.mil/), etc.
22+
23+
First, you will need to download DoD's PKI Certificate Authority
24+
[certificates](https://public.cyber.mil/announcement/new-dod-pki-cas-released/) onto your Apple device.
25+
Once downloaded, open the `dod_pke_chain.pem` file within the zip file from your downloads folder.
26+
You will install them on your iPhone by clicking it, then navigating to your
27+
`Settings->Profile Downloaded->Install`. Recommend you always verify the certificates are authentic by
28+
following the instructions in the README included in the zip file.
2429

2530
Once installed, plugin your adapter, smart card reader, and CAC and navigate to the webpage of your choice. You
2631
will be prompted to select your certificate and enter your pin.
2732

2833
![Cac Enabled Sites on an iPhone!]({{ site.url }}/assets/images/cac-enabled-sites.png){: .center-image}
2934

30-
I tested this with an iPhone 12 with the
31-
[USB-3 camera adapter](https://www.apple.com/shop/product/MK0W2AM/A/lightning-to-usb-3-camera-adapter).
32-
However, this should work with any adapter or USB-C smart card reader directly to a USB-C iPad.
33-
I did run into some issues with using my exact model of smart card reader where the power provided
34-
by the adapter was insufficient, but this was solved by plugging in a charger to the lightning port on
35-
the adapter.
35+
I tested this with an iPhone 12 with the
36+
[USB-3 camera adapter](https://www.apple.com/shop/product/MK0W2AM/A/lightning-to-usb-3-camera-adapter)
37+
and a generic OTG lightning to USB3.0 adapter from
38+
[Amazon](https://www.amazon.com/Certified-Lightning-Portable-iPhone13-Keyboard/dp/B09NND4R8N/).
39+
However, this should work with any OTG adapter or
40+
[USB-C smart card reader](https://www.amazon.com/Identiv-SCR3310v2-0-Smart-Card-Reader/dp/B07VVSY96H/)
41+
directly to a USB-C iPad.
42+
43+
Apple's USB-3 camera adapter did require power to the lightning port on the adapter to work,
44+
while the generic OTG adapter did not require anything additional.
3645

3746
![Smart Card Reader Power]({{ site.url }}/assets/images/usb-3-camera-cac.png){: .center-image}
3847

0 commit comments

Comments
 (0)