Configure Safari for CAC on macOS

Safari on macOS relies entirely on the Keychain for certificate management, making CAC setup straightforward once you understand the process. This guide covers certificate trust settings and common macOS-specific configurations.

macOS Certificate Architecture

Safari uses the macOS Keychain to store and manage certificates. Your CAC reader communicates through the built-in smart card framework (CryptoTokenKit), eliminating the need for third-party middleware in most cases on modern macOS versions.

Installing DoD Root Certificates

Download and install the DoD certificate bundle for Mac:

1. Download the Mac certificate installer from militarycac.com
2. Open the .pkg file and follow the installation prompts
3. Enter your Mac administrator password when requested
4. Open Keychain Access to verify certificates were installed

Configuring Certificate Trust

After installation, you may need to manually trust certain certificates:

1. Open Keychain Access from Applications > Utilities
2. Select “System” keychain from the left sidebar
3. Find DoD certificates (search for “DoD”)
4. Double-click each certificate and expand “Trust”
5. Set “When using this certificate” to “Always Trust”
6. Close and enter your password to confirm

CAC Reader Setup on macOS

Most USB CAC readers work automatically on macOS Catalina and later. To verify:

1. Connect your CAC reader and insert your card
2. Open Keychain Access and look for your CAC certificates
3. They should appear automatically under “login” keychain
4. If not visible, try unplugging and reconnecting the reader

Testing Safari CAC Authentication

Navigate to a CAC-enabled DoD website in Safari. When prompted, select your authentication certificate from the dropdown and click Continue. Enter your CAC PIN when the system dialog appears.

Troubleshooting Tips

Certificate not appearing: Open System Preferences > Security & Privacy > Privacy tab and check that Safari has access to your Keychain.

SSL errors: Clear Safari’s website data and history, then restart the browser. Also verify all DoD certificates are trusted in Keychain Access.

Card not recognized: Check System Information > USB to verify your reader is detected. Try a different USB port or restart your Mac.