Forum Discussion

jdewing's avatar
jdewing
Icon for Cirrus rankCirrus
Sep 24, 2019

DOD CAC/PIV with C3D (Client Certificate Constrained Delegation)

I’m trying to get DOD CAC to work with C3D (Client Certificate Constrained Delegation).  I have no issue using PIV certificate for authentication to work with C3D.  With the same configuration, for some reason with CAC certificate, it keeps prompting for PIN number.  It would not unlock the certificate stores to be use to authenticated through F5.

The difference between CAC cert and PIV cert is the key usage:

 

CAC have the following while PIV don’t:

·         Key usage; Digital Signature, Non Repudiation

·         Extended Key usage; E-mail protection

 

Any thought? Has anyone use CAC certificate authentication with C3D?

No RepliesBe the first to reply