Common Access Card

This chapter provides information about the integration between a Common Access Card (CAC) and Codar, where Common Access Card is used as the user authentication mechanism. By configuring Common Access Card, you are able to log into Codar using a Personal Identity Verification card.

Caution If you configuring Codar to be compliant with FIPS 140-2, do NOT configure Common Access Card before configuringCodar to be compliant with FIPS 140-2. If you have configured any feature before configuring Codar to be compliant with FIPS 140-2, you must re-install Codar.

After integrating Codar with Common Access Card, the following log in rules apply:

  • You can log in to the Codar Console using a Personal Identity Verification card with a valid certificate.
  • You can log in to the Codar Console using an Codar out-of-the-box user account without a Personal Identity Verification card.
  • You can only log in to the Codar Console as a valid LDAP user, with a Personal Identity Verification card.

Caution For the Codar Console, single sign-on (SSO) cannot be enabled at the same time as Common Access Card.

Caution For the Codar Console on Windows, in a standard environment (not a FIPS 140-2 compliant environment), only the JKS keystore type is supported for Common Access Card.

For the Codar Console on Linux, in a FIPS 140-2 compliant environment, only the PKCS #12 keystore type is supported for Common Access Card.

Complete the following steps to integrate Codar with Common Access Card:

Stop Codar

If Codar is running, stop Codar. See Stop Codar for instructions.