Forum Discussion
DOD CAC/PIV with C3D (Client Certificate Constrained Delegation)
I’m trying to get DOD CAC to work with C3D (Client Certificate Constrained Delegation). I have no issue using PIV certificate for authentication to work with C3D. With the same configuration, for some reason with CAC certificate, it keeps prompting for PIN number. It would not unlock the certificate stores to be use to authenticated through F5.
The difference between CAC cert and PIV cert is the key usage:
CAC have the following while PIV don’t:
· Key usage; Digital Signature, Non Repudiation
· Extended Key usage; E-mail protection
Any thought? Has anyone use CAC certificate authentication with C3D?
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com