Mac OS X Active Directory, Group Policy & Single Sign-On. ADmitMac ® turns a Mac into a true Active Directory client. Today, a decade after becoming the world's first non-Windows Active Directory integration product, ADmitMac is a one-stop solution for Mac-Windows management and security needs, ensuring compliance with standards such as SOX, PCI DSS, FFIEC, HIPAA or HITEC. Is your CAC reader Mac friendly? Visit the USB Readers page to verify the CAC reader you have is. Go back (active) About us; Microsoft Remote Desktop For Mac Os X 10.7.5 Download Guide - in 2020 Our Microsoft Remote Desktop For Mac Os X 10.7.5 Download graphics. You may also be interested in: Lastbil Modifiering. Connection client for mac x i'm running and 10. Internet Explorer for Mac the Easy Way: Run IE 7, IE8, & IE9.
- Zoom Client Download Mac
- Download Active Client 7.2
- Windows 10 Active Client Download
- Active Client For Mac Downloads
Important
Netgate is offering COVID-19 aid for pfSense software users, learn more.
There are three client options for Mac OS X.:
- The OpenVPN command line client. Most users prefer a graphical client, so thisoption will not be covered.
- Tunnelblick, a free option available for download at the Tunnelblick Website.
- The commercial Viscosity client. At the time of this writing, it costs $14USD for a single seat. If OpenVPN is used frequently, Viscosity is a muchnicer client and well worth the cost.
Both Tunnelblick and Viscosity are easily installed, with no configurationoptions during installation.
Configuring Viscosity¶
When using the Viscosity client, it can be configured manually or the OpenVPNClient Export package may be used to import the configuration. Viscosityprovides a GUI configuration tool that can be used to generate the underlyingOpenVPN client configuration. The CA and certificates can be imported manually,and all of the parameters can be set by hand. This section cover importing aViscosity bundle from the export package.
- Download a copy of the Viscosity bundle for the client from the OpenVPNClient Export package
- Locate the saved file, which will end in
.visc.zip
indicating that it is acompressed archive - Copy this exported bundle to a folder on the Mac
- Double click this file and it will expand to
Viscosity.visc
- Double click
Viscosity.visc
and Viscosity will open and import theconnection as shown in Figure Viscosity Import
- Delete the
Viscosity.visc
directory and the.zip
archive - Viscosity will be running after import, and may be found in the menu bar
- Click the lock icon added to the menu bar at the top of the screen
- Click Preferences to check that the configuration was imported as shown inFigure Viscosity Preferences
Viscosity Preferences¶
- Check the Connections area to see if the connection imported successfullyas shown in Figure Viscosity View Connections.
- Close the Preferences screen
- Click the lock in the menu bar
- Click the name of the VPN connection to connect as shown in FigureViscosity Connect. After a few seconds, the lock in the menu barwill turn green to show it connected successfully.
Viscosity Connect¶
Zoom Client Download Mac
- Click on it and then click Details as shown in FigureViscosity Menu to see connection information
On the first screen (Figure Viscosity Details), the connectionstatus, connected time, the IP assigned to the client, and the IP of the serverare all displayed. A bandwidth graph is displayed at the bottom of the screen,showing the throughput in and out of the OpenVPN interface.
Viscosity Details¶
Clicking the up/down arrow button in the middle of the details screen displaysadditional network traffic statistics. This shows the traffic sent within thetunnel (TUN/TAP In and Out), as well as the total TCP or UDP traffic sentincluding the overhead of the tunnel and encryption. For connections usingprimarily small packets the overhead is considerable with all VPN solutions. Thestats shown in Figure Viscosity Details: Traffic Statistics are from only afew pings traversing the connection. The traffic sent in bringing up theconnection is also counted here, so the initial overhead is higher than what itwill be after being connected for some time. Also, the typical VPN traffic willhave larger packet sizes than 64 byte pings, making the total overhead anddifference between these two numbers considerably less.
Download Active Client 7.2
Clicking on the third icon in the middle of the Details screen shows theOpenVPN log file (Figure Viscosity Details: Logs). If there is any troubleconnecting, review the logs here to help determine the problem. See alsoTroubleshooting OpenVPN.
Viscosity Details: Logs¶
When it comes to installing your new CAC reader onto your home computer, there’s a doubt that installing on Mac is much more complicated. Often, you’ll need to install a CAC Enabler just for your Mac to recognize the hardware. But don’t worry in this handy guide, we’ll walk you through how to install a CAC enabler for Mac and which one to choose.
Here’s the thing…. Mac has many different OS’s which means that there are many different CAC enablers. And some will work for particularly OS’s only.
MUST READ IMPORTANT INFO BEFORE YOU BEGIN
Before you get started downloading and installing your CAC Enabler, there is some information that you need to be aware of:
- Only download and install ONE CAC Enabler. Multiple CAC Enablers can cause your CAC Card reader not to work. If you currently have an incorrect CAC enabler installed, you need to uninstall and remove it before getting the correct one. This includes built-in Smart Card Readers for the newer OS’s.
- Some of these CAC Enablers will ask for a Keychain Password. You should already have this information. It’s your CAC PIN. But before you enter this information, make sure you’ve already selected your CAC Certificate. And you need to use your full CAC pin. Failure to do so can actually lead to you getting locked out of your CAC Card. If this happens, you’ll have to go to your nearest ID Card Office or PSD to get it unblocked.
- After successfully installing your CAC Enabler, you need to restart your computer before trying to access any CAC protected site. This ensures that your computer has properly recognized and installed the CAC Enabler.
- Just because you’ve properly installed and set up your enabler, that doesn’t mean that it will work with all browsers–particularly Firefox. As popular of a browser it is, Firefox is notorious for not allowing CAC-protected sites to be accessed. This is why I recommend using Google Chrome. It has the least obstructions for you when it comes to using your CAC Reader.
What CAC Enabler Do You Need For Your OS?
In order to make sure that you download the right OS, be sure to use our handy Table of Contents to jump to the proper section.
And with that, let’s get your Mac system CAC Card ready!
Catalina (10.15.x)
If you’ve purchased a Mac with the Catalina OS installed, STOP RIGHT HERE.
Catalina comes pre-equipped with a built-in CAC Enabler. This means you do not need to install a third-party program. If you do, it may interfere with your built-in enabler and cause your CAC to not be recognized. Just be sure that you have the proper DOD certificates installed.
But what if you purchased your Mac and then upgraded to the new system?
If you haven’t installed any third-party enablers, the built-in function should automatically start working. But if you have previously installed any third-party CAC enablers, you’re going to have to uninstall and completely remove those first.
Mojave (10.14.x)
Similar to the Catalina OS, Mojave also has a built-in Smart Card Reader. This means that a third-party CAC enabler program may not be necessary. So before downloading any other enabler, test out the built-in first–just make sure you have the proper DOD certificates needed.
If your Mojave’s built-in reader is not working, then you can proceed to pick up another CAC enabler. There are 4 verified readers that work for Mojave that we know of.
Each of these should work for any type of CAC Card.
High Sierra (10.13.x)
High Sierra is another Mac OS with a built-in Smart Card reader. However, unlike Mojave or Catalina, you cannot access CAC-protected sites through Safari. They are not supported through Safari in this OS.
You need to use Google Chrome for optimal results. If you are adamantly opposed to using Chrome, I’d recommend to go ahead and update your Mac OS to Mojave or Catalina (if supported). Afterwards, you should find you don’t need a CAC enabler as long as you have the proper certificates.
However, if things aren’t working out the way they should, you do have some options for third party CAC enablers.
These have been verified to work with High Sierra and with every CAC Card type we’ve come across.
Sierra (10.12.x)
Sierra is the last of the Mac OS’s that has a built-in Smart Card Reader. However, you need to be aware that this reader will not function with the Safari browser even with the proper certificates.
You’ll need to utilize Google Chrome along with the proper DOD (or other) certificates.
Windows 10 Active Client Download
There have been reports of the Sierra built-in CAC reader failing to operate properly. And in that case, you’re going to need to download one of these verified CAC enablers:
These CAC Enablers work with every type of CAC Card.
One thing to note is that if you decide to utilize PKard with Sierra, you need to make sure that you’re using PKard version 1.7 or higher.
El Capitan (10.11.x)
Unlike its newer OS counterparts, El Capitan does not come with a built-in smart card reader. You will be required to download and install a third-party program. Thankfully, there are 5 different CAC Enablers you can use.
One thing to note is that Smart Card Services will not work with all types of CAC Cards. If your CAC Card is designated as Oberthur ID One 128 v5.5a D, Smart Card Services cannot read it. You can find this information on the back of your CAC card itself near the magnetic strip.
This can be solved one of two ways. Either opt for a different enabler or get a new CAC Card.
Yosemite (10.10.x)
Yosemite requires a third-party enabler to be installed in order for your CAC Card to be recognized. There are 5 different verified options for Yosemite users:
Although a verified option, we recommend against using Smart Card Services. The reason for this is that Smart Card Services doesn’t accept all types of CAC Cards–particularly those labeled Oberthur ID One 128 v5.5a D.
Mavericks (10.9.x)
Mavericks is another Mac OS without a built-in Smart Card Reader. This means that you’re going to need to download a CAC Card Enabler. We’ve found five different platforms that work with this OS.
However, we suggest steering clear of Smart Card Services if you’re carrying the Oberthur ID One 128 v5.5a D CAC Card. This enabler does not recognize this particular type of CAC Card.
Mountain Lion (10.8.x)
Since Mountain Lion OS has no built-in Smart Card Reader, you’ll have to avail of a third-party CAC Card Enabler. There are 5 different options to choose from for this platform.
However, if you’re using the CAC Card type, Oberthur ID One 128 v5.5a D, steer clear of Smart Card Services. They don’t recognize this type of card.
Lion (10.7.x)
Lion is one of Mac’s older operating systems. But that doesn’t mean you’re completely out of luck if need to use a CAC card on it. There are 4 different options you have.
It’s worth mentioning that if you are planning on using Smart Cards Services, ensure you don’t have an Oberthur ID One 128 v5.5a D CAC Card. The program doesn’t work with the typing.
Snow Leopard (10.6.x)
The first recommendation I have for Snow Leopard users is to upgrade their system as soon as possible. But if due to constraints you are unable to, there are still a few paths you can take when it comes to ensuring your CAC Card can be read.
Just don’t opt for Smart Card Services if you’re using an Oberthur ID One 128 v5.5a D CAC Card.
Leopard (10.5.x)
If you’re still using Leopard, our first recommendation is to upgrade your OS immediately. However if you’re unable to, there’s still hope for using a CAC Card on your computer.
Your available options for CAC Card Enabler are:
However, TENS will only work if your computer has an Intel processor. It won’t work if you’re using a PPC.
Again, the first recommendation for Leopard is not downloading a new CAC enabler but updating your system.
Our Top CAC Enabler Picks for All Operating Systems
Active Client For Mac Downloads
When it comes to which enablers we like best, it boils down to two.
PKard and ActivClient for Mac.
Either one of these is compatible with just about every OS on this list–with the exception of Catalina (Be sure to use their built-in enabler.)
Plus they have vendor support. And that can be quite handy if you’re having issues with your CAC enabler. However, they don’t come free. ActivClient for Mac rings in at around $50 while PKard is available for around $40.