Mac CAC Configuration

macOS has built-in smart card support through CryptoTokenKit, making CAC configuration simpler than other platforms. This guide covers the complete setup process for Mac users.

macOS Smart Card Support

Starting with macOS Sierra (10.12), Apple includes native smart card support. Most USB CAC readers work without additional drivers on modern macOS versions including Monterey, Ventura, and Sonoma.

Connecting Your CAC Reader

1. Plug your USB CAC reader into an available port
2. For USB-C Macs, use a quality USB-C to USB-A adapter
3. The reader LED should illuminate when connected
4. Insert your CAC with the chip facing up or toward the reader

Installing DoD Certificates

Download and install the certificate bundle:

1. Visit militarycac.com and download the Mac certificate installer
2. Open the downloaded .pkg file
3. Follow the installation prompts, entering your Mac password when asked
4. Restart your browser after installation

Verifying Certificate Trust

Open Keychain Access to confirm proper installation:

1. Launch Keychain Access from Applications > Utilities
2. Select “System” in the left sidebar
3. Search for “DoD” in the search box
4. You should see multiple DoD Root CA certificates
5. Double-click each and verify “Trust” is set to “Always Trust”

Checking CAC Recognition

With your CAC inserted, verify macOS sees your certificates:

1. Open Keychain Access
2. Look in the left sidebar for a new keychain with your card’s name
3. Click on it to view your CAC certificates
4. You should see your email and authentication certificates

Browser Configuration

Safari: Works automatically with Keychain – no additional configuration needed.

Chrome: Uses Keychain automatically on Mac.

Firefox: Requires manual configuration – see our Firefox CAC setup guide.

Troubleshooting

Card not appearing in Keychain: Try removing and reinserting the card. Check System Information > USB to verify the reader is detected.

Certificate errors in browser: Ensure all DoD certificates are trusted in Keychain Access. You may need to manually set trust for each certificate.

PIN prompt issues: Some older Macs may need the 90Meter middleware for proper PIN handling. Download from militarycac.com if needed.