Introduction
This article outlines the steps to configure Firefox to prompt for a Personal Identification Number (PIN) during Common Access Card (CAC) authentication. CAC is a smart card used for identification and authentication in various government and military environments. The instructions provided on militarycac.com have been followed, and the card has been recognized and authenticated successfully using pcsc_scan and pkcs11-tool. However, Firefox is not prompting for the PIN during login.
Prerequisites
Before proceeding, ensure that your system meets the following requirements:
- Firefox web browser (latest version)
- Smart card reader
- A valid Common Access Card (CAC)
Steps to Configure Firefox for CAC Authentication
Step 1: Install the necessary extensions
Install the following extensions in Firefox:
Step 2: Configure Firefox for CAC authentication
Follow these steps to configure Firefox for CAC authentication:
- Open Firefox and type about:config in the address bar and press Enter.
- Search for the following preferences:
network.automatic-ntlm-auth.trusted-urisnetwork.automatic-ntlm-auth.sign-interactive
Double-click on each preference and set its value to "about:blank".
- Click on the menu button (three horizontal lines) and select "Options".
- Go to the "Privacy & Security" tab and click on "Certificates".
- Click on "View Certificates" and select the "Personal" tab.
- Click on "Import" and import the root certificate from your CAC.
Step 3: Test the configuration
After configuring Firefox for CAC authentication, test the configuration by attempting to access a website that requires CAC authentication. Firefox should now prompt for the CAC PIN during login.
In this article, we covered the steps to configure Firefox to prompt for a PIN during Common Access Card (CAC) authentication. We installed the necessary extensions, configured Firefox for CAC authentication, and tested the configuration.