cancel
Showing results for 
Search instead for 
Did you mean: 

Having problems configuring FireFox to use a CAC reader

SOLVED
Highlighted
New User

Having problems configuring FireFox to use a CAC reader

I am trying to configure Firefox so I can use my CAC card reader with it. My problem is when I try to load a module under Tools>Options>Advanced>Encryption>Security Devices. When I try to load acpkcs201.dll (or any of the other alternate .dll files) I get an error message that says "Unable to load module".

When I try to use the DoD Configuration 1.2 add-on from forge.mil, it also is unable to make this configuration.

The CAC reader and software works fine under Chrome and IE. The only problem is the .dll wont load up in Firefox using the add-on or manually.

Does anyone know how to make this module load properly?

I am using: Windows 7 x64 Firefox 3.6.9 SCR331 card reader ActivClient 6.2

1 ACCEPTED SOLUTION

Accepted Solutions
jab
New User

Re: Having problems configuring FireFox to use a CAC reader

I ran into the same problem at first. I tried loading the *.dll files in the obvious location - C:\Program Files\ActivIdentity\ActivClient. None of the acpkcs*.dll files would load. Then I realized that the current version of Firefox is still a 32-bit program - it cannot load 64-bit ActivClient drivers.

Try loading C:\Program Files (x86)\ActivIdentity\ActivClient\acpkcs211.dll instead. That worked for me - the *.dll loaded immediately and detected my CAC reader. I have successfully been able to access CAC restricted sites with no problems.

My configuration: Windows 7 Professional x64 Firefox 3.6.10 ActivClient 6.2.0.74 - FIXS 1002012

10 REPLIES
New User

Re: Having problems configuring FireFox to use a CAC reader

I think you will need to get support for this DLL from its makers, who should have instructions on how to load it into Firefox. Make sure you are using a version of Firefox they support.

I note you are using 64-bit Windows; you should also check that this is supported and that you have the right version of the DLL.

Gerv

Support Forum Moderator

Re: Having problems configuring FireFox to use a CAC reader

Install.rdf for that extension shoes Firefox 3.6.* compatibility, so it should install into Firefox 3.6.9.
Instructions are here:
http://forge.mil/Resources-Firefox.html

New User

Re: Having problems configuring FireFox to use a CAC reader

Thanks for your response. I forgot to add to my original post that I am using ActivClient 6.2 which is compatible with Windows 7 64-bit. I also forgot to add that everything works fine in IE and Chrome.

I will edit my post to include that information.

New User

Re: Having problems configuring FireFox to use a CAC reader

the-edmeister,

Thanks for your response.

Yes it should but its not... thats the problem. I've followed those instructions. I've opened the .xpi file and examined the code to make sure it was looking for the right .dll files in the right places. I've tried to manually load the .dll files using known methods. Nothing seems to work. I'm hoping someone who has overcome this or knows how to overcome this can help out.

jab
New User

Re: Having problems configuring FireFox to use a CAC reader

I ran into the same problem at first. I tried loading the *.dll files in the obvious location - C:\Program Files\ActivIdentity\ActivClient. None of the acpkcs*.dll files would load. Then I realized that the current version of Firefox is still a 32-bit program - it cannot load 64-bit ActivClient drivers.

Try loading C:\Program Files (x86)\ActivIdentity\ActivClient\acpkcs211.dll instead. That worked for me - the *.dll loaded immediately and detected my CAC reader. I have successfully been able to access CAC restricted sites with no problems.

My configuration: Windows 7 Professional x64 Firefox 3.6.10 ActivClient 6.2.0.74 - FIXS 1002012

New User

Re: Having problems configuring FireFox to use a CAC reader

I have the same problem but loading the .dll from the 32 bit directory still doesn't work. It says can not add module. However, in my configuration, neither IE (9) nor Chrome nor Safari will use the CAC although they see the reader and actually ask for the certificate. My only working configuration is to load XP Virtual on Windows 7 and that works fine. The solution sounded good, I'll keep trying....

Configuration: Windows 7 64 bit Professional, Firefox 3.6.1.6, Reader: 02Micro CCID SC Reader (Dell Latitude Notebook standard), ActivClient CAC x64 6.2.0.50

New User

Re: Having problems configuring FireFox to use a CAC reader

Finally, got a solution that works. Trick is to load ActivClient FIXS 1101014 that updates 6.2 to 6.2.0.108. Then you can add the DLL in Firefox as earlier described and voila, Firefox can access and authorize my CAC to the appropriate HTTPS sites. Really was getting tired of loading XP Virtual just to use my CAC. I haven't tried IE9 or other browsers at this point but as long as one browser in Windows 7 64bit works, don't care. FIXS 1101014 is available on various sites, got mine from an Army site.

New User

Re: Having problems configuring FireFox to use a CAC reader

In Firefox 4 this actually works fairly easily now. For 64 bit users, make sure you have the latest ActivClient version.

Menu sequence to configure this is:

  1. Options->Options->Advanced->Encryption (tab)
  2. Select Security Devices and then click on Load
  3. In the Module Name field Type: CAC Reader
  4. In the Module filename Field: select Browse:

    32 bit ActivClient 6.2 computers go to: C:\Program Files\ActivIdentity\ActivClient\acpkcs211.dll

    64 bit ActivClient 6.2 computers go to C:\Program Files(x86)\ActivIdentity\ActivClient\acpkcs211.dll

  5. Select OK. The result may prompt for your CAC PIN to import the certificates.
  6. Select OK to get out of this window then select: View Certificates
  7. When the Certificate manager opens ensure that the personal certificates have been imported. I was prompted for a Master Password at this point, this is your CAC PIN.
  8. Close and relaunch Firefox. Verify functionality by accessing AKO and selecting CAC Login.
  9. If prompted for certificate information, most likely, the root certs do not have defined exceptions within Firefox. Just select and add to complete.
  10. When / if prompted for Master Password, enter your 6-8 digit PIN for your CAC.
New User

Re: Having problems configuring FireFox to use a CAC reader

For users that need to change between certificates of their CAC card, I found in Firefox 4.x you have to import the DOD pki files. To do this follow the instructions at the URL below inside Firefox (do all 4). After successfully completing the imports, restart Firefox and when you get to a DOD website like "DISA web-mail" it will ask you to pick the certificate you would like to use. For the email certificate look at the details of each certificate and find the one that has your email address attached to it. This one you much use for all email certificate authentication.

DOD PKI Certificates

Best Regards, Dimitri