I have it working on firefox on two linux machines. For some reason,
though, on my laptop(they both have F17), if I go to "manage
certificates," THEN it prompts me for pin to access CAC certs, and then
shows them. I was then able to use CAC sites, and it did prompt me for
which cert to use. However, on my desktop, despite copying all .db
files from FF profile, along with having the following pkcs11.txt,
"manage certificates" does not prompt for pin, nor does it show the
Obviously the end goal is to be able to use google chrome as easily as
with FF in order to access CAC card, without having to go into settings
or anything. I have not been able to get much help from chrome support
forums, google, etc.
Im not sure if this is the right place, but ill reply until someone say
Before continuing, ill ask you to test Firefox first (where the
pkcs#11 libraries can be added from gui).
After adding the module, click on "security devices" to check if the
card has been detected and in "view certificates", to check if the
certificate inside the card is visible.
If that works, it should work in recent versions of Chrome.
Apart from the smartcard working on the browser, some sites can be
enabled to acces through specific software (or even using an specific
CSP, as in windows). Can you provide the site you are testing?
Chrome lets you choose the certificate to access, like other browsers
To append in chrome i remember i used modutil, part of nsstools, but
providing a different command:
#apt-get install libnss3-tools
$modutil -dbdir <firefoxprofile> -add "your module"
aditoinally you can add [-mechanisms FRIENDLY]