Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I read that I need to download cackey from forge.mil but the download isn't there any more. How can I get my CAC reader working now? Is there a sudo apt-get command for it? Does someone have a copy of the file? Is it located else where because I can't find it.

share|improve this question

4 Answers 4

up vote 1 down vote accepted

If you cannot access DISA's Forge.mil website, (Because it requires CAC access)

You can Download the 32bit Deb file here.
MD5: 37398d413221b7d6c6ee539978feec47
SHA1: 3ccfc97610b1b3503084caa7f1924c52d2f1a1b4

Or, the 64 bit Deb here.
MD5: 3935d1376ae7175f9814505c59a917f7
SHA1: 153b30d025869679238444e2ef0545ed7185f4f8

share|improve this answer
    
you are the man –  dustin Apr 26 '13 at 16:26
1  
I'll take that to mean it worked. :) Also, for what it's worth, 12.04 & 12.10 gave me issues accessing Enterprise E-mail OWA, but 13.04 works like a charm. I think it's an issue with the way the 12's select the cert. –  Argusvision Apr 26 '13 at 17:55
    
@Arguvision what did you do to access the EE? I go the site, hit ok, enter my pin, and then get an error screen. I am using 13.04 as well. –  dustin May 20 '13 at 19:33
    
I haven't done anything special. From a fresh install, I followed the steps I laid out at askubuntu.com/questions/285543/… . Take a look at it and see if you're missing a step. Also, once you receive an error message you need to close firefox before you try again, or you'll just keep getting an error. If it will allow you to chose a cert, make sure you select the "e-mail" cert or it will fail. –  Argusvision May 21 '13 at 1:07

This is what I have done and I successfully accessed AKO, enterprise email, and even the disa site for cackey.

  1. sudo apt-get update
  2. sudo apt-get dist-upgrade
  3. Open a terminal and type the following: sudo apt-get install libpcsclite-dev pcscd pcsc-tools libccid build-essential autoconf
  4. Restart your computer
  5. Open a terminal and type: pcsc_scan [check to make sure you have an output and it does not get stuck on Scanning present readers....]
  6. Go to Ubuntu Software Center and search for coolkey and install
  7. Download the DoD Configuration Extension for Firefox @ http://www.forge.mil/Resources-Firefox.html (Let it install the plugin and restart; don't worry about all of the errors just click through them and restart your browser).
  8. Go to Edit > Preferences > Advanced > Encryption > Security (You should see your CAC id visible)
  9. Go to AKO ect...
share|improve this answer
    
I get an error when I go to login to AKO. SSL peer can't verify your certificate. –  dustin Mar 30 '13 at 21:08
    
@Cameron - FYI, Coolkey only works with older cards. For the newer (144k) cards you need cackey. –  Argusvision Apr 26 '13 at 18:00
    
And, you don't need step 7 –  Argusvision Apr 26 '13 at 18:02

For what I read, what you need is some authorization to be able to download. See How can I get access to Forge.mil (CAC users)?

share|improve this answer
    
It says you need your CAC to register. That puts me in a conundrum since my system is Linux only. –  dustin Mar 19 '13 at 1:06

If you don't want to trust the download links in @Argsvision's answer, or just need to use a CAC only briefly. You can use the USAF's Lightweight Portable Security (LPS) ISO to access forge.mil and other CAC-only sites. Get it from http://www.spi.dod.mil/lipose.htm After using LPS to download the CAC files from forge.mil you can then follow the steps in @Argsvision's answer.

You can thus use the LPS ISO to "bootstrap" a computer without any other computer that can use a CAC or trusting anyone except the spi.dod.mil site.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.