Installation of smart card reader and smart card drivers in macOS
- 1 General
- 2 What is nessesary to work with digital signature
- 3 System requerments
- 4 Driver for readers
- 5 Install Smart Card driver
- 6 Testing Installation
- 7 Uninstall
- 8 Documentation
In several places in this instruction you have to run a command in Terminal. You can start Terminal from Applications/Utilities or you can write Terminal in Spotlight.
The text writen this way are commands, which you have to run in Terminal. You dont have to write them just copy them with the clipboard. To work correctly commands which starts with sudo,is nessesary for you to have a password for the user. If you don't have set a temporary one during the settings. After you use one of the commands you will be propted for password.
What is nessesary to work with digital signature
In order to use your digital sigature is nessesary to install the driver for the smart card reader, the middleware for the smart card and the service for smart card resders (pcscd) running. The service pcscd must start automatically when you plug a reader.
The software requered to work with certificates on Mac, supports Mac OS X 10.5 or newer.
Support for 10.5 is paritial. All needed drivers work on 10.5 but InfoNotary software for signing of documents and card management does not.
Driver for readers
If the your reader is labeled with ACR38C-SPC-R, mLector-S or ACR39T at the bottom, then your device works with the build in driver in the OS and you don't have to install any drivers.
Omnikey (HID Global)
For you to use OmniKey CardMan, you have to install the driver from HID Global for your version of OS X:
If your reader is labeled with miniLector-S you must install this driver - driver for miniLector-S for OS X from 10.6 to 10.9 inclusive.
In OS X 10.10 Yosemite this readder is supported by Apple driver, so there is no need to install another driver.
Install Smart Card driver
Depend of the model of your card you have to use different software. The model of the card is on the Personal Access Rights, which you receive with your card. In case your model is „T&S DS/2048 (L)“, you have to install Bit4id Universal Middleware. If the model is „CardOS V4.3B (C)“, you have to install OpenSC.
Incase you dont have Personal Access Rights, you can check your card model with this command pcsctest from terminal. She will ask you for the reader number, you have to press 1. If there is no problem with the reader installation you will get a row beginning with „Current Reader ATR Value“. Against this text is an indetifier for the card.
- For T&S DS/2048 the indentidier is „3B FF 18 00 FF 81 31 FE 55 00 6B 02 09 03 03 01 11 01 43 4E 53 11 31 80 8C“.
- For CardOS V4.3 the indentidier is „3B F2 18 00 02 C1 0A 31 FE 58 C8 08 74“.
Installation of Bit4id Universal Middleware
Please write to firstname.lastname@example.org , and we will send you the drivers.
In case you have to register the PKCS#11 module на Bit4id in a program different from Firefox, Thunderbird or InfoNotary Smart Card Manager you have to specify a path - /System/Library/bit4id/cryptoki/libbit4ipki.dylib.
Download and install OpenSC
To use your certificate on OSX you must install OpenSC. With OpenSС you dont install any program with graphic interface so you wont find anything in Applications. You can download the latest version for your OS from here:
- For Mac OS X 10.9 and newer.
- For Mac OS X 10.8.
- For Mac OS X 10.7.
- For Mac OS X 10.6.
- For Mac OS X 10.5.
In case you have to register the PKCS#11 module на Bit4id in a program different from Firefox, Thunderbird or InfoNotary Smart Card Manager you have to specify a path - /Library/OpenSC/lib/onepin-opensc-pkcs11.so.
Use both OpenSC and Bit4id Universal Middleware
In case you want to use both OpenSC and Bit4id Universal Middleware on the same computer you have to forbid OpenSC to access T&S DS/2048 smart cards. The easiest way to do it is to use following program:
If you prefer to do it manually you can find instructions on OpenSC page.
If you have problem using your certificate, you can run the following program to identify it:
It can send information directly to us. After report is accepted, it will show nine digit number, that can be used by our support team to see test result. If you do not have Internet connection or direct sending failed, you can save report and send it to email@example.com.
Reader and card should be connected to the computer when test program is started.
OpenSC can be uninstalled with this program - OpenSC uninstaller.
Bit4id Universal Middleware can be uninstaled, by running the program Uninstaller from the folder /System/Library/bit4id.
Documentation for OpenSC is available on Internet or in folder /Library/OpenSC/doc/ after the installation.
On the page Working with OpenSC you can find instruction for th most common operation with OpenSC.