Installation of smart card reader and smart card drivers in macOS
In several places in this instruction you have to run a command in Terminal. You can start Terminal from Applications/Utilities or you can write Terminal in Spotlight.
The text writen this way are commands, which you have to run in Terminal. You dont have to write them just copy them with the clipboard. To work correctly commands which starts with sudo,is nessesary for you to have a password for the user. If you don't have set a temporary one during the settings. After you use one of the commands you will be propted for password.
What is nessesary to work with digital signature
In order to use your digital sigature is nessesary to install the driver for the smart card reader, the middleware for the smart card and the service for smart card resders (pcscd) running. The service pcscd must start automatically when you plug a reader.
The software requered to work with certificates on Mac, supports Mac OS X 10.5 or newer.
Support for 10.5 is paritial. All needed drivers work on 10.5 but InfoNotary software for signing of documents and card management does not.
Driver for readers
If the your reader is labeled with ACR38C-SPC-R at the bottom, have a sign SIMLector 38T on the inside or a sign mLector-S, then your device works with the build in driver in the OS and you don't have to install any drivers.
Reader that are labeled ACR 38U,are not compatible with this driver, so if you use such a device you have to install driver from the site of the manifactorer.
Omnikey (HID Global)
For you to use OmniKey CardMan, you have to install the driver from the site of Hid Global - Driver HID Global for OS X 10.5 and newer.
The installatioon of Omnikey driver will disable the driver for smart card readers in Mac OS X. If you use other device you don't have to install them. In case you want to use both please contact with Infonotary support centar.
To use Todos Argos Mini II you have to install the driver. Depends on what version of Mac OS X you use install the following:
Install Smart Card driver
Depend of the model of your card you have to use different software. The model of the card is on the Personal Access Rights, which you receive with your card. In case your model is „T&S DS/2048 (L)“, you have to install Bit4id Universal Middleware from you installation CD. If the model is „CardOS V4.3B (C)“, you have to install OpenSC.
Incase you dont have Personal Access Rights, you can check your card model with this command pcsctest from terminal. She will ask you for the reader number, you have to press 1. If there is no problem with the reader installation you will get a row beginning with „Current Reader ATR Value“. Against this text is an indetifier for the card.
- For T&S DS/2048 the indentidier is „3B FF 18 00 FF 81 31 FE 55 00 6B 02 09 03 03 01 11 01 43 4E 53 11 31 80 8C“.
- For CardOS V4.3 the indentidier is „3B F2 18 00 02 C1 0A 31 FE 58 C8 08 74“.
Installation of Bit4id Universal Middleware
To use Bit4id on Mac OS X, you must install Bit4id Universal Middleware. You can find it on the installation CD, in folder Install/MacOSX. to work with Firefox и Thunderbird, you have to install Bit4id Cryptoki Libraries 1.2.12.pkg, and for integration with the OS and the other programs for Mac OS X - bit4id-tokend-ts-en-22.214.171.124.pkg.dmg.
In case you have to register the PKCS#11 module на Bit4id in a program different from Firefox, Thunderbird or InfoNotary Smart Card Manager you have to specify a path - /System/Library/bit4id/cryptoki/libbit4ipki.dylib.
Download and install OpenSC
To use your certificate on OSX you must install OpenSC. With OpenSС you dont install any program with graphic interface so you wont find anything in Applications. You can download the latest version for your OS from here:
In case you have to register the PKCS#11 module на Bit4id in a program different from Firefox, Thunderbird or InfoNotary Smart Card Manager you have to specify a path - /Library/OpenSC/lib/onepin-opensc-pkcs11.so.
Use both OpenSC and Bit4id Universal Middleware
In case you want to use both OpenSC and Bit4id Universal Middleware on the same computer you have to forbid OpenSC to access T&S DS/2048 smart cards. This can easily be done by replacing the configuration file of OpenSC (/Library/OpenSC/etc/opensc.conf) with this one.
In case of a problem run this program with a reader plugged in and send the text with a breaf description of the problem on email@example.com:
- Test Installation program for Mac OS X 10.6 and newer.
Manually running and stopping pcscd
On Mac OS X pcscd is starting from securityd when a reader is inserted. In case you want to forbid the automatic start yo must edit the file /System/Library/LaunchDaemons/com.apple.securityd.plist. In this file you must add the collored rows:
<string>/usr/sbin/securityd</string> <string>-i</string> <string>-s</string> <string>off</string>
After that restart the computer.
To start manually pcscd yo must start this command from Terminal sudo /usr/sbin/pcscd -f. When the daemon is started this way to stop it you press Ctrl + C or run sudo killall pcscd in Terminal.
OpenSC can be uninstaled with this command - sudo /usr/local/bin/opensc-uninstall.
Bit4id Universal Middleware can be uninstaled, by running the program Uninstaller from the folder /System/Library/bit4id.
Documentation for OpenSC is available on Internet or in folder /Library/OpenSC/doc/ after the installation.
On the page Working with OpenSC you can find instruction for th most common operation with OpenSC.