Belkin Smart Card Reader Driver For Mac

Buy Belkin USB Smart Card Reader - card reader - USB - B2B at Walmart.com. Free Grocery Pickup Reorder Items Track Orders. Departments See All. Holiday Headquarters. Holiday Headquarters. Belkin USB Smart Card Reader - card reader - USB - B2B. Average rating: 0 out of 5 stars, based on 0 reviews Write a review.

20 Oct 2014 Using PIV smart cards with Mac OS X 10.10 Yosemite

I have not been able to get my Belkin media reader to work on my Dell XPS Windows 8 system. I tried to get a driver from the Belkin web site but they do not seem to provide support for this reader. Discuss: Belkin USB Smart Card Reader - card reader - USB - B2B Sign in to comment. Be respectful, keep it civil and stay on topic. We delete comments that violate our policy, which we encourage.

Posted at 16:06h in Employee Posts, Tech Notes11 Comments

Using PIV smart cards for HHS VPN login with Mac OS X 10.10 Yosemite

Note: This entire post is basically google search bait designed to (hopefully) allow others struggling with the same issues to save a bit of time. Hope it helps!

October 30, 2014 Update

There is an active Citrix support thread on the “no valid certificates found” issue. If this is bothering or interesting you, you may want to monitor this URL: http://discussions.citrix.com/topic/357156-no-certificate-found-at-windows-logon-screen-for-smartcard-authentication/

October 24, 2014 Update

The bulk of this post concerns the $29 Pkard product from Thursby which is the first I found with explicit OS X 10.10 support. I just had a chance to test the new Yosemite 10.10 compatible free SmartCard utility from Centrfy mentioned here: http://www.centrify.com/mac/smartcard/free-smart-card-for-federal-military-cac-piv.asp
. Long story short: It works to get past the VPN gateway but throws the same “no valid certificates found” error when trying to login to the Windows desktop via a Citrix Receiver client. Still no idea why this is happening – on other versions of OS X my smart card credentials transparently passed onto the OS. Still – consider the Centrify software if you don’t want to spend $29.

Short Summary

I need to use a HHS PIV card to remotely access computer systems from a brand new Macbook air running OS X 10.10 Yosemite. As of the time I wrote this article, the state of freely available open source software for PIV smart card support on Yosemite is pretty lacking. This will change but if you are in a hurry (as I was) the best thing you can do in the short term is pay $29.95 for the Thursby PKard software from http://www.thursby.com/products/pkard-mac — it installed seamlessly and allowed me to login via VPN although for some reason my certificates were not passed on to the Windows remote desktop system, hopefully I don’t need the $179 “ADmitMac” product for that.

I expect the state of open source smart card and tokend implementations to get better and more easily usable on Yosemite so I may only be using the Thursday product for a short time. It did, however work fast and got me successfully logged onto the remote VPN server.

Current status: Thursby PKard software works well on Yosemite for VPN access but the Windows desktop I get sent to via a Citrix client reports “no valid certificates” and I’m forced to use my standard user login name and password to complete the final authentication. This was not something I needed to do on OS X 10.7 or 10.7 with the open source smart card software stack.

Background

I do some subcontracting work for a few US Government agencies, one of which requires me to be able to connect remotely to US.GOV networks and infrastructure. The way I connect is via a federal standard PIV Card which is a very cool physical badge that doubles as a holder of biometric and personal crypto certificate information. When I’m trying to physically enter a building the PIV card is my secure photo ID badge (with backup biometrics and fingerprints stored o it) — when I try to enter a US Government network “virtually” the same PIV card doubles as VPN access device because it contains a personal set of crypto keys that uniquely identify me. Two-factor authentication is achieved by having to punch in a PIN code when my certs are presented to the remote system. It’s a very slick and interesting system.

From what I can tell, PIV cards are very similar to the CAC cards carried by military members that are often required for secure web browsing and access to military resources In fact, when searching the internet for PIV assistance you will find that some of the best help resources are coming from the military CAC-user community. A perfect example of this is https://militarycac.com/macnotes.htm and https://militarycac.com/cacenablers.htm – the site that I turned to first when looking for OS X Yosemite PIV/smartcard status info.

My Gear

SCM SCR3500 Smart Card Reader – Amazon Link: http://amzn.com/B00434WQVU
Belkin flexible USB adapter – Amazon Link: http://amzn.com/B000BK107G
Macbook Air running OS X 10.10 Yosemite

Getting the PIV card to work on 10.10 Yosemite

Verify your reader works

Attach your reader, use the OS X “About this Mac” -> “System Report” function to verify that your computer and OS actually see and recognize a smart card device:

Buy and install the PKard software

Launch OS X Keychain Assistant

What you want to see is the certificates and credentials that are stored on the smart card. If your USB reader and the PKard software are working, Yosemite 10.10 can now “see” the crypto info stored on the PIV card

Fix the Trust Chain (If your PIV certificate is not trusted)

This may not be an issue for an upgraded system but on my brand new laptop my host OS was missing the intermediate certificate trust chain. Keychain Assistant helpfully throws up the red text saying: “This certificate was signed by an unknown authority”

OS X Yosemite does not “trust” the Certificate Authorities that signed my PIV card certificates.

The solution is to go out and install the intermediate certificates necessary to build the full lenght trust chain.

The source of trust chain certificates almost certainly depends on what agency you work for or are trying to access. In my case I needed the US GOV Health and Human Services (HHS) intermediate certificates and the best online resource I found for HHS certificates needed for PIV cards is actually over on a NIH hosted site:

I downloaded and installed the “HHS Entrust FPKI Certificate Chain” from the above website:

Installing the certificates results in a chain of trust that culminates with your personal PIV certificates being recognizes as trusted:

Now Test

At this point you have a recognized USB card reader, your personal PIV certificates are visible to Mac OS X and the trust chain is complete. This should be all you need to access or login to PIV-enabled websites.

I removed screenshots showing the portal site I was logging into out of paranoia so I can’t show examples of successful logins. I’ll just show this OS X window which is the system prompt you get when your certificate is being used and the host OS wants to verify your PIN code as part of the two-factor authentication process.

If you see this, this is your PIN entry prompt and it means that stuff is generally working:

Remember that this is where your PIN goes, ignore the system text about “keychain password” …

Minor Issue

Using the steps outlined above I can successfully authenticate to the remote access environment I need to use on a daily basis. However, on my older laptop my PIV card credentials were transparently passed onto the Windows OS as well and I was not prompted for a second login.

That is not the case now. After getting past the VPN, the remote desktop session can’t see my PIV certificate and I have to fallback to using standard AD username and password. Not optimal but it works for my purposes.

Longer term I want this issue to go away. I’m not sure if it’s a Citrix Receiver issue or perhaps this is a designed-in behavior of the Thursday software designed to upsell software that offers more functionality. I was willing to pay $29.99 for the functionality I needed and the software and documentation is great but I’m not going to shell out $179 for SSO access to a Windows Desktop.

I’m going to keep researching this and will keep an eye on the state of open source / free smart card services for Yosemite 10.10. Will update this post as needed.

2011-04-19 15:47:43

Apple’s XServe comes with a Lights Out Management (LOM) capability. For anyone dealing with co-located

2019-04-23 11:15:15

2019-03-13 11:24:30

Installation Steps

Step 1: Obtain a CAC Reader

Step 2:CAC Reader driver / Video

Step 3:DoD Certificates / Video

Step 4:ActivClient / Video

Step 4a: Update ActivClient

Step 5:IE adjustments / Video

Log into a CAC enabled webpage now to test

Step 6:IBM Forms Viewer (formerly Lotus Forms) | Video

Step 7:eSign / ApproveIt / Video

Click the images below each readerto find online businesses selling the CAC reader you desire

ONCE YOU'VE DECIDED WHICH READER YOU WANT TO PURCHASE OR DOWNLOADED THE DRIVER, PROCEED TO STEP 3

A little bit of information / history: Not all CAC readers are created equal. This page shows over 40 different CAC readers available. You will only see readers that I have tested and will recommend to you on this page (Except for the Non-Supported (old) readers section).

CAC Reader Manufacturers (listed alphabetically):

NOTICE: The links to vendors / products is an attempt to save you time searching for the specific item, by linking you directly to the item shown. You will notice I have multiple [when I can find] vendors to choose from. I have no personal preference as to who you decide to purchase from. I am not endorsing any particular product or vendor, I'm merely informing you what works and where you can purchase a CAC reader from.

Identive (formerly SCM Microsystems) SCR Readers

SCR-3310 v2 CAC reader driver

Mac Friendly [10.5 - 10.10] (Alternate fix needed for some Mac's) Mac driver (most likely NOT needed) NOT Tiger (10.4.11)

Note: This model used to be sold at MCX / NEX / PX & BX and works with all versions of Windows

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

SCR-331CAC reader use driver located here sometimes you will need this driver, or this driver(works best with XP)

Mac Friendly [10.4 - 10.10]

If this reader does not initially work on your Windows 8 / 8.1, 7, Vista or Mac computer you may want to update the firmware

NOTE: Some Mac users are having problems with this old reader. If you are going to purchase a CAC reader, and have a Mac, we recommend the SCR-3310 v2 (above), or SCR-3500 (below).

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

SCR-3500 Smart fold mini USB Smart Card Reader

Mac Friendly [10.4 - 10.10]

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

SCR-3311 Heavy base USB Smart Card (CAC) Reader driver

Mac Friendly [10.5 - 10.10](NOT Tiger (10.4 or 10.10 when using Centrify))

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

SDI010 / SDI011 Contactless Smart Card Reader driver

NOTE: I was not able to figure out how to make the contactless part work, just the regular CAC slot

Mac friendly after thisupdate for Leopard and Snow Leopard (NOTTiger(10.4.11), or Lion (10.7 and above)

SCR-335 USB Smart Card Reader Driver

I do not have one to test

Identive Cloud 2700 R Contact Smart Card Reader

Mac [10.5 - 10.10] friendly with thisupdate

Did NOT work with Windows 8, DID work with Windows 7

f purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

SCR-301 CAC Reader

NOTMac compatible

IOGear Readers

IOGEAR model GSR202 USB Smart Card Reader Driver (GSR201Driver)

Mac Friendly [10.5 - 10.10](NOT Tiger (10.4))

If your Mac is having problems with this reader, you will need to update it using a Windows computer (or Bootcamped) Mac.

Note: This model is sold at the AAFES PX & BX

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

NOTE: 'Some' Windows 7 (64 bit) users are having problems with this reader not staying in device manager when the computer is restarted. Install the driver direct from IOGear and restart computer to remedy this situation. (This has worked for some people). Others are still having problems. You can update the driver manually following this guidance. The only other cure for it not working is to return it and consider a different reader on this page.

IOGear model GSR203

Mac Friendly [10.5 - 10.10](NOT Tiger (10.4))

If your Mac is having problems with this reader, you will need to update it using a Windows computer (or Bootcamped) Mac.

Note: This model is sold at the AAFES PX & BX

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

IOGear model GSR202V

Mac Friendly [10.5 - 10.10](NOT Tiger (10.4))

If your Mac is having problems with this reader, you will need to update it using a Windows computer (or Bootcamped) Mac.

Note: This model is sold at the AAFES PX & BX

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Stanley Global Model SGT111 USB Smart Card Reader 32bitDriver64bitDriver

Mac [10.5 - 10.10] friendly with thisupdate (NOT Tiger 10.4)

More information regarding this CAC Reader

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Stanley Global Model SGT114 Smart Card Reader 32bitDriver64bitDriver

Mac [10.5 - 10.7] friendly with thisupdate (NOT Tiger 10.4)

Mac [10.8 - 10.10] friendly with this update

More information regarding this CAC & multi memory SIM Card Reader

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Stanley Global Model SGT117 USB Smart Card Reader Driver

Mac [10.5 - 10.10] friendly with thisupdate (NOT Tiger 10.4)

More information regarding this CAC Reader

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Stanley Global Model SGT118 USB Smart Card Reader Driver

Mac [10.5 - 10.10] friendly with thisupdate (NOT Tiger 10.4)

More information regarding this USB CAC Reader (NOT Bluetooth)

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Stanley Global Model SGT119 USB Smart Card Reader Driver

Mac [10.5 - 10.10] friendly with thisupdate (NOT Tiger 10.4)

More information regarding this USB CAC Reader (NOT Bluetooth)

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Stanley Global Model SGT121 USB Smart Card Reader, Multi-Memory, SDXC, SIM Reader with 3-Port USB Hub Driver

Mac [10.5 - 10.10] friendly with thisupdate (NOT Tiger 10.4)

More information regarding this CAC Reader

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Stanley Global Model SGT122 USB Smart Card Reader 81-In-One Multi-Memory and Phone SIM Card Reader / Writer / Editor

Mac [10.5 - 10.8] friendly with thisupdate (NOT Tiger 10.4)

Mac [10.8 - 10.10] friendly with this update

This reader has 4 possible fixes to work with Windows 7:

1. Follow guidance in this PDF

2. Download patch from Microsoft

3. Download Realtek driver

4. Download alternate Realtek driver

More information regarding this CAC Reader

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Belkin F1DN005U USB Smart Card Reader PDF

Mac Friendly [10.5 - 10.10](NOT Tiger (10.4))

This reader will show up as an SCR-3310v2 in device manager

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

HID / Omnikey / ActivIdentity Readers

Omnikey 3021 USB Smart Card CAC Reader

Mac friendly after thisupdatedownload the 'OMNIKIEY 5X2X, 3X21 PCSC FOR MAC OS X'

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Omnikey 3121 USB Smart Card CAC Reader

Mac friendly after thisupdatedownload the 'Omnikey 3x21 PC/SC CCID Driver for Mac OS X'

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

HID OMNIKEY Cardman 5321 USB CAC Reader driver

Mac friendly after thisupdatedownload the 'Omnikey 5x2x PC/SC Driver for Mac OS X'

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Advanced Card Systems Readers

ACR3801 USB Smart Card Reader

Mac [10.5 - 10.10] friendly after thisupdate

.If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

ACR38 USB Smart Card Reader

Mac [10.5 - 10.10] friendly after thisupdate

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

ACR38U-TFC Pocket Mate Smart Card Reader

Mac [10.5 - 10.10] friendly after this update (except when using Firefox)

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

GemPlus Reader

GemPlus USB-SW Smart Card Reader 32bitDriver64bitDriver

Mac 10.4 Friendly with driver update (10.5 -10.9 have native support built in).

A Soldier could not get it to work, so, he purchased an SCR-331

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

GemPC Twin USB Smart Card Reader drivers

Mac Friendly [10.3 - 10.9] update 'may' be needed (only for 10.3-10.4)

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Cherry Reader

Cherry ST-1044 USB Smart Card CAC reader driver (Windows) Instructions

Mac 10.7 - 10.9 have native support built in (10.5 & 10.6 need this update)

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

Manhattan Reader

Manhattan 172844 USB CAC reader driver (XP, Vista 32, Vista 64, Windows 7) Instructions

NOTMac friendly

Unotron Reader

Unotron SpillSeal SAC2 - Washable Smart Card Reader (drivers)

I do not have one to test

Manufacturer website shows NOMac compatibility

Zvetco Reader

Zvetco Verifi C500 All Metal SmartCard Reader

Mac Friendly [10.6 - 10.10]

This reader will show up as an SCR-3310v2 in device manager

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

+iD Reader

+iD The World's Smallest ID Card Reader

Mac [10.5 - 10.10] friendly after thisupdate

CP Technologies Reader

ClearLinks CL-UC-200 Smart Card Reader

NOTE: You can purchase this reader from a lot of different vendors, but the manufacturer doesn't even list this reader on their suite to offer support. Use at own risk

NOTMac friendly

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

SIIG Reader

SIIG JU-CR0012-S1 USB 2.0 Smart Card Reader

Mac [10.6 - 10.10] friendly with thisupdate

If purchasing from Amazon, consider Amazon Prime (free for 30 days), includes free 2 day shipping and the ability to watch over 40,000 movies and TV shows anytime and Music Streaming

'Antique' Readers

The manufacturers have abandoned support for these readers.

Use at your own risk!!

The CAC readers below 'might' work with Windows XP but NOTWindows 8, 8.1, 7, Vista, or Mac. This is partly because they will not read the PIV II CACs (GEMALTO TOP DL GX4 144, GEMALTO DLGX4-A 144, G&D FIPS 201 SCE 3.2, and Oberthur ID One 128 v5.5 Dual) and they [the manufacturers] haven't invested in any firmware updates.

The simplest solution is for you is to invest in a more modern CAC reader above this section

Belkin Usb Smart Card Reader

---------------------------------------------------------------------------------------------------

ActivIdentity Readers

ActivCard / ActivIdentity V3 Smart Card reader

Mac friendly althoughThe manufacturer does not show any support for this reader on Macs

ActivCard V2 Smart Card reader driver

NOTMac friendly(2 different Navy personnel have tweaked the firmware update for an SCR-331 and found an old XP computer to update the firmware from). They have never sent me a 'How - To.' I recommend you find a different reader on this page that is compatible with your OS.

---------------------------------------------------------------------------------------------------

Cherry

Belkin Smart Card Reader Install

Cherry ST-1000U USB Smart Card Reader

NOTMac friendly

---------------------------------------------------------------------------------------------------

DataKey

DataKey DKR830 Smart Card Reader

---------------------------------------------------------------------------------------------------

Gemalto

GemPC 430 driver support for Windows XP and older

NOTMac friendly (according to manufacturer website)

---------------------------------------------------------------------------------------------------

Litronic / Netsign 215 USB CAC reader driver (alternate driver)

NOTMac friendly (according to manufacturer's website)

---------------------------------------------------------------------------------------------------

The Schlumberger CAC reader below is here only for driver support. I do not recommend you purchase this CAC reader unless you are not planning on using a computer newer than Windows XP. This means it won't work on Vista Windows 7, or 8 as it is an old reader with NO support from the vendor.

Schlumberger ReflexV2 Driver (installation instructions on CAC drivers page)

Alternate installation file (installation instructions are in the .html file inside the zipped file)

NOTMac friendly

---------------------------------------------------------------------------------------------------

Identive (formerly SCM Microsystems)

SCR-301 USB CAC reader (driver)

According to the Identive's website driver download page, it will not work on anything newer than XP

Belkin Smart Card Reader Drivers For Mac F1dnoo8utt

NOTMac friendly

SCR-111 Serial CAC reader

According to the Identive's driver download page, it will not work on anything newer than XP

Belkin Cac Card Reader Driver

Also, due to the fact that most computers do not have serial ports or use PS2 keyboards anymore, this reader is useless for modern computers. The manufacturer has not provided any updates to be able to use with the PIV II CACs or use with Windows Vista, 7, 8 or 8.1.

NOTMac friendly

SCB Solutions sells CAC readers and has a full time person to provide support to their customers

If you live in the UK, you can purchase CAC readers from SmartCardFocus

Belkin Smart Card Reader

Alternate driver download locations: