1. Supported Configurations
2. Installation
   1. Automated Installation
      1. Methods
   2. Manual Installation
      1. Staging
      2. Browser Configuration
         1. Google Chrome
         2. Firefox
3. Known Issues
4. Troubleshooting
   1. Microsoft Teams
5. Resources

WARNING: Please make sure all browsers are closed before running the script.

If you choose this option, you do not need to do the manual installation.

This script requires root privileges since it installs the cackey package and its dependencies. Feel free to review the script here if this makes you uncomfortable. For transparency, the cackey package is downloaded from here and the DoD certificates are downloaded from here, both of which are recommended by militarycac.

Important Notes:

• The automated installation requires wget and unzip to run and will install both during the setup, if they are not already installed. If you don't want either tool, remove it after the setup is complete using sudo apt remove <command>.
• The scripted installation has only been tested on the configurations listed in the Supported Distributions
• This script uses the 64-bit version of the cackey package.

• wget

sudo bash -c "$(wget https://raw.githubusercontent.com/jdjaxon/linux_cac/main/cac_setup.sh -O -)"

• curl

sudo bash -c "$(curl -fsSL https://raw.githubusercontent.com/jdjaxon/linux_cac/main/cac_setup.sh)"

• fetch

sudo bash -c "$(fetch -o https://raw.githubusercontent.com/jdjaxon/linux_cac/main/cac_setup.sh)"

WARNING: Only perform these steps if you have not done the automated installation.

1. Run the following command to install the CAC middleware:

sudo apt install libpcsclite1 pcscd libccid libpcsc-perl pcsc-tools libnss3-tools

2. To verify that your CAC is detected, run (stop with ctrl+c):

pcsc_scan

3. Download and install cackey from here.

4. Run the following command to verify the location of the cackey module and make note of the location:

find / -name libcackey.so 2>/dev/null

• NOTE: libcackey.so should be in one of the following locations:

/usr/lib/libcackey.so
        OR
/usr/lib64/libcackey.so

5. If apt updates cackey from 7.5 to 7.10, it will move libcackey.so to a different location. To prevent cackey from updating, run the following:

sudo apt-mark hold cackey

• NOTE: The cackey package will still show as upgradeable.

6. Download DOD certs from DISA here.

7. Unzip the AllCerts.zip folder using the following command:

unzip AllCerts.zip -d AllCerts

1. cd into the newly created AllCerts directory
2. Run the following command:

for cert in *.cer; do certutil -d sql:"$HOME/.pki/nssdb" -A -t TC -n "$cert" -i "$cert"; done

3. Run the following command:

printf "library=/usr/lib64/libcackey.so\nname=CAC Module" >> $HOME/.pki/nssdb/pkcs11.txt

1. cd into the AllCerts directory
2. Run the following command:

for cert in *.cer; do certutil -d sql:"$(dirname "$(find "$HOME/.mozilla" -name "cert9.db")")" -A -t TC -n "$cert" -i "$cert"; done

3. Run the following command:

printf "library=/usr/lib64/libcackey.so\nname=CAC Module" >> "$(dirname "$(find "$HOME/.mozilla" -name "cert9.db")")/pkcs11.txt"

• NOTE: Since the firefox database directory starts with a random string of characters, it needs to be found dynamically. Its naming and location follows this convention: $HOME/.mozilla/firefox/<alpahnumeric string>.default-release.