@@ -9,13 +9,13 @@ keep_md: true
99comments : True
1010tags : [Army, Military, CAC, iOS, iPadOS, CryptoTokenKit]
1111---
12- #### Update 22 Sep 2023:
12+ ### Update 22 Sep 2023:
1313Confirmed the iPhone 15 Pro with a
1414[ USB-C Smart Card reader] ( https://www.amazon.com/Identiv-SCR3310v2-0-Smart-Card-Reader/dp/B07VVSY96H/ )
15- connected directly to it works without any special connector (you can still use a
15+ connected directly works without any special connector (you can still use a
1616USB Type A to USB Type C adapter, if your smart card reader requires it).
1717
18- ### Native Smart Card Support in iOS/iPadOS
18+ ## Native Smart Card Support in iOS/iPadOS
1919Starting with iOS 16 and iPadOS 16.1, Apple
2020[ natively] ( https://support.apple.com/guide/deployment/use-a-smart-card-on-iphone-and-ipad-dep8b8c8927a/web )
2121supports smart card readers and authentication, signing, and encryption using your Common Access Card (CAC) through the
@@ -28,7 +28,7 @@ sites to use CAC-enabled websites on your Apple mobile devices. Now all you need
2828to access websites such as [ webmail] ( https://webmail.apps.mil/mail/ ) , [ HRC] ( https://www.hrc.army.mil/ ) ,
2929[ DTS] ( https://www.defensetravel.osd.mil/ ) , etc.
3030
31- ### Setup
31+ ## Setup
3232First, you will need to download the DoD's PKI Certificate Authority
3333[ certificates] ( https://public.cyber.mil/announcement/new-dod-pki-cas-released/ ) onto your Apple device.
3434(* note: some websites may require additional certificates, which can be downloaded from
@@ -42,7 +42,7 @@ will be prompted to select your certificate and enter your pin.
4242
4343![ Cac Enabled Sites on an iPhone!] ({{ site.url }}/assets/images/cac-enabled-sites.png){: .center-image}
4444
45- ### Certificate Management
45+ ## Certificate Management
4646All certificates are accessible in ` Settings->General->VPN & Device Management->Configuration Profiles `
4747while the root certificates are managed in ` Settings->General->About->Certificate Trust Settings ` .
4848
@@ -56,23 +56,23 @@ However, this should work with any OTG adapter or
5656[ USB-C smart card reader] ( https://www.amazon.com/Identiv-SCR3310v2-0-Smart-Card-Reader/dp/B07VVSY96H/ )
5757directly to a USB-C iPad.
5858
59- ### Troubleshooting:
59+ ## Troubleshooting:
6060
61- #### This Connection is Not Private
61+ ### This Connection is Not Private
6262Click ` Show Details->view the certificate ` and download
63- the respective public certificate from [ disa ] ( https://crl.gds.disa.mil ) .
63+ the respective public certificate from [ DISA ] ( https://crl.gds.disa.mil ) .
6464
6565![ Connection is Not Private] ({{ site.url }}/assets/images/connection_not_private.png){: .center-image}
6666
6767For example, IPPS-A currently uses the ` DOD SW CA-60 ` certificate, which is not included in the
68- ` DoD Root CA 3 ` certificate installed in the Setup above. Selecting the ` DOD SW CA-60 ` in DISA's
68+ ` DoD Root CA 3 ` certificate installed in the Setup section above. Selecting the ` DOD SW CA-60 ` in DISA's
6969[ DoD PKI Management] ( https://crl.gds.disa.mil ) and downloading it will allow you to install it.
7070
7171You may also have to ` reduce protections ` if you have any additional privacy & security settings enabled for
7272Safari such as ` Advanced Tracking and Fingerprinting Protection ` or ` Show IP Address ` if you have iCloud
7373Private Relay turned on.
7474
75- #### Cannot Use Accessory
75+ ### Cannot Use Accessory
7676I did run into some issues with Apple's Lightning to USB 3 Camera Adapter where the power provided by the adapter was
7777insufficient, but this was solved by plugging in a charger to the lightning port on the adapter.
7878
0 commit comments