Centrify Express For Mac Smart Card Download

  • Related Articles KB-20210: Common Questions Regarding Centrify DirectControl and CoreOS HOWTO Setting-up the ServiceNow Centrify Privilege Access Request App Labs Using YubiKey (PIV or OATH OTP) to Secure Centrify Identity Service and Privilege Service HOWTO Set-up ServiceNow Automatic Provisioning in Centrify Identity Service Centrify 17.11 Release Notes Centrify 17.6 and 17.6 Hotfix.
  • May 24, 2012 Centrify Express for Smart Cards implements Smart Card authentication on Mac OS X systems and supports all the essential capabilities users need to perform daily job activities using popular web.

With Centrify Identity Service,TM Mac Edition, you can use Active Directory to centrally manage authentication, policy enforcement, single sign-on (SSO), and user self-service for popular endpoint devices running Mac OS X, macOS, iOS, and Android. A key component of Centrify Identity Service, Mac Edition is the Centrify agent for Mac computers.

Individuals who have a valid authorized need to access DoD Public Key Infrastructure (PKI)- protected information but do not have access to a government site or government-furnished equipment will need to configure their systems to access PKI-protected content.

Accessing DoD PKI-protected information is most commonly achieved using the PKI certificates stored on your Common Access Card (CAC). The certificates on your CAC can allow you to perform routine activities such as accessing OWA, signing documents, and viewing other PKI-protected information online. For more information about your CAC and the information stored on it, visit http://www.cac.mil.

Before you begin, make sure you know your organization’s policies regarding remote use.


To get started you will need:

  • CAC
  • Card reader
  • Middleware (if necessary, depending on your operating system version)

You can get started using your CAC by following these basic steps:

  1. Get a card reader.
    At this time, the best advice for obtaining a card reader is to work with your home component to get one. In addition, please review the DoD CAC Reader Specifications for more information regarding the requirements for a card reader.
  2. Install middleware, if necessary.
    You may need additional middleware, depending on the operating system you use. Please contact your CC/S/A for more information on the middlew​are requirements for your organization. You can find their contact information on our Contact Us tab.
  3. Install DoD root certificates with InstallRoot (32-bit, 64-bit or Non Administrator).
    In order for your machine to recognize your CAC certificates and DoD websites as trusted, run the InstallRoot utility (32-bit, 64-bit or Non Administrator) to install the DoD CA certificates on Microsoft operating systems. If you’re running an alternate operating system such as Mac OS or Linux, you can import certificates from the PKCS 7 bundle. The InstallRoot User Guide is available here.
  4. Make certificates available to your operating system and/or browser, if necessary.
    Pick your browser for specific instructions.


To get started you will need:

  • CAC (see note below)
  • Card reader

You can get started using your CAC on your Mac OS X system by following these basic steps:

  1. Get a card reader
    Typically Macs do not come with card readers and therefore an external card reader is necessary. At this time, the best advice for obtaining a card reader is through working with your home component. In addition, please review the DoD CAC Reader Specifications for more information regarding card reader requirements.
  2. Download and install the OS X Smartcard Services package
    The OS X Smartcard Services Package allows a Mac to read and communicate with a smart card. In order for your machine to recognize your CAC certificates and DoD websites as trusted, the installer will load the DoD CA certificates on OS X. Please refer to this page for specific installation instructions.
  3. Address the cross-certificate chaining Issue
    These instructions walk through adjusting the trust settings on the Interoperability Root CA (IRCA) > DoD Root CA 2 and the US DoD CCEB IRCA 1 > DoD Root CA 2 certificates to prevent cross-certificate chaining issues. This can make it appear that your certificates are issued by roots other than the DoD Root CA 2 and can prevent access to DoD websites.
  4. Configure Chrome and Safari, if necessary
    Safari and Google Chrome rely on Keychain Access properly recognizing your CAC certificates.
    1. In Finder, navigate to Go > Utilities and launch KeychainAccess.app
    2. Verify that your CAC certificates are recognized and displayed in Keychain Access

Note: CACs are currently made of different kinds of card stock. To determine what card stock you have, look at the back of your CAC above the magnetic strip. Most CACs are supported by the Smartcard Services package, however Oberthur ID One 128 v5.5 CACs are not. Third party middleware is available that will support these CACS; two such options are Thursby Software’s PKard and Centrify’s Express for Smart Card.


To get started you will need:

  • CAC
  • Card reader
  • Middleware

You can get started using your CAC with Firefox on Linux machines by following these basic steps:

  1. Get a card reader.
    At this time, the best advice for obtaining a card reader is to work with your home component to get one. In addition, please review the DoD CAC Reader Specifications for more information regarding the requirements for a card reader.
  2. Obtain middleware.
    You will need middleware for Linux to communicate with the CAC. The CoolKey PKCS#11 module provides access to the CAC and can be installed using Linux package management commands.
    • For Debian-based distributions, use the command apt-get install coolkey
    • For Fedora-based distributions, use the command yum install coolkey. The CoolKey PKCS #11 module version 1.1.0 release 15 ships with RHEL 5.7 and above and is located at /usr/lib/pkcs11/libcoolkeypk11.so.

    If you prefer to build CoolKey from source, instructions are included in the Configuring Firefox for the CAC guide.

  3. Configure Firefox to trust the DoD PKI and use the CAC.
    To configure Firefox to communicate with the CAC, follow these steps to install the DoD root and intermediate CA certificates into the Firefox NSS trust store, load the CoolKey library, and ensure the Online Certificate Status Protocol (OCSP) is being used to perform revocation checking.

Next Steps

Your internet browser is now configured to access DoD websites using the certificates on your CAC. Now that your machine is properly configured, please login and visit our End Users page for more information on using the PKI certificates on your CAC.

cardPresso Release
For Windows
For Mac OS X
Version:1.6.70 (64 bits Processor only)

Centrify For Mac Os X

Releases history

Centrify App Download

Added support to new Evolis Avansia driver
Magicard driver support improvements
Web print server improvements
IDP SOLID printers fixes
Updated Barcode Lib (Windows only)
New options for automatically check for updates
Updated Excel Lib (Windows only)
Updated translations
User Interface
Fixed issue with card model editing refresh
Fixed issue related with missing signature/fingerprint database field options
Fixed issue related with updating design items through encoding script
Fixed issue with text automatic size calculation
Added new button to toggle logo visibility
Production Mode view options now available since XS
Changed font in encoding script view to “Consolas” font
Fixed issue with database refresh Events during Print
Fixed issue with database record insertion and refresh
Added support to GPrintec printers (K30, K60)
Added support Fargo HDP 6600 printer
Added support to SOLID Printers
Added support new ribbons in Zebra ZC (White, YMCKOK, KrO)
Updated Magicard plugin to SDK v1.09 and fixed small issues
Fixed issue on IDP Smart-30, 31, 50, 51 related with ethernet printing and encoding
Added new warning if license is lost during a print job
Added pcProxPlus model RDR-80081AKU-C16
Changed “Format a Mifare Tag to support MAD' wizard script
Fixed issue on HID Omnikey 5127CK, wrongly listed as contact reader
Integration & personalized operations
EULA Update
Updated Canon EOS SDK to version 13.11.10
Fixed issues related with QR Code
Updated Translations (e.g. Japanese)
User Interface
Improved check for updates window dialog
Improved print dialog, image acquisition now correctly updated its preview thumbnail
Improved print dialog, customizable informative label to identify the current record
Fixed refresh issue when adding new layout
Fixed issue with behavior when changing layout manually
Improved database credentials. Forcing user to always input database credentials
Added IDP SOLID-510 and SOLID-310
Added Magicard Printer Models (USB):
- Magicard Rio Pro 360
- Magicard 300
- Magicard 600
Added Zebra ZC Series
Added Sinfonia CHC - C320
Fixed issue with warning when printing with watermark
Fixed auto-print's 'Set Database Filter' parameter being ignored after the first 'Continuous printing' refresh
Fixed database filter 'Null' issue
Fixed issues with Print Command/Continuous Printing
Fixed issue with multi layouts image selection with database
Added ethernet support on Zebra ZXP7, ZXP8, ZXP9 printers
Fixed issues on Zebra ZXP 7, 8, and 9, allowing use of the Inhibitor panel
Fixed issue hang in preparation to print with Fargo C50
Fixed issue with the 'Generic Encoder' option
Integration & personalized operations
Added EULA in Russian
Changed encoding to “UTF-8” in EULA HTML
User Interface
Fixed 'Prefix' and 'Suffix' area not visible on Concatenation window
Improved Print window ergonomics
Added Advanced Print Operations tab to Print window
Improved performance when using multi-layouts
Fixed Layouts tab gets empty when making an item link between two images
Fixed 'Only when has valid data' print option behavior
Fixed Image item property 'Save with document - No' behavior
Improved 'Database view' user interface
Fixed behaviors when acquiring image through Photo Editor
Fixed drag and drop of clipart items from the Clipart dockbar
Added old 'Show photo columns' button in Table View
Jpeg background images not being displayed on the Preview tab from the Production mode
Improved Print Preview now showing all active layer’s items (including UV/Overlay)
Improved large databases performance
Fixed several issues with database filter
Fixed Production Mode always in read-only mode when using a database connected through ODBC drivers
Fixed date format not imported with the correct format and column name issues when using CSV format.
Improved CP automatically cleans up the DB connection history when the database is disconnected.
Fixed 'Keep database position' not working properly
Fixed Microsoft® Excel® database connection on macOS® (XM edition only)
Improved DB connection default path should be the same as the card location
Fixed conditional printing filter
Fixed 'All records' and 'Custom' printing option
Fixed crash with Nisca PR-C101 after driver update
Smart-51 printer plugin now supports split ribbon feature, using only one group of panels for one front and back card (YMC for front, K for back).
Smart-51 printer plugin now supports high DPI values: 300x600 and 300x1200
Improved Entrust DatacardTM card printers printing speed
Improved color printing with HID® Fargo® printers
Added script error control for Zebra® printers
Updated Zebra® ZXP Series 1TM and ZXP Series 3TM SDK
Fixed dual-side printing not working with Smart-30 and Smart-50 printers
Added TD1 MRZ format (national ID cards)
Fixed encoder with non-standard names not being recognized in the print job
Added full support to new generation of HID® OMNIKEY® Readers (MIFARE® Classic®, MIFARE® DESFire®, MIFARE Ultralight® C, MIFARE Ultralight® EV 1, 2wire, 3wire and I2C)
Added support for NDEF Mime Records
Magnetic encoding error control can now be configured by the user
Integration & personalized operations
Added script command to retrieve the printer name
Added script command to set the item position (X and Y)
Added User login access through command line
Fixed 'No main window' option when printing in silent mode
Fixed 'ignore' command not working on 'After Magnetic Print' event
Added script command to record the print status
Improved Filesystem file properties kept when saving a card
User permissions
Fixed restricting access to the Design View permissions not being applied properly on startup
Fixed Audit Report date filter not being applied properly
Updated embedded user manual
Updated all languages translations
Add the Contact + Contactless card model
Updated Canon EOS SDK to version
Fixed crash with fingerprint acquisition
User Interface
Option to remove banner from DB and Production Mode View
Fix Production Mode print buttons action
Settings selected using 'Advanced Options' button are now used for printing
DB filter by user
Excel + Mac Major issue
Fixed card corruption issue related to the database name
Added HID® Fargo® DTC 1500
Added support for Edikio Access and Edikio Flex printers
SCM Readers - Read contact Tags correct ATR
Fixed Datacard SD360 magnetic encoding print card gets stuck inside the printer
Integration & personalized operations
Fixed issue where an empty script file would cause a card load to fail
User Interface
Fixed Shrink to Fit font size adjustment
Added Refresh printer list button on Print window
Added 'Advanced Print Operations' tab on Print window
Fixed printer tips tooltip behavior
Improved font size consistency across computers with different DPI values
Fixed Font issue related with unknown characters
Fixed minor interface issues
Improved performance with databases
Optimization of the Https Image download links process when using point to indexed images.
Smart 51 SDK updated to version
Magicard SDK updated to last version (
Added default IDP Smart plugin entry
Added Elliaden Caroline to Magicard Plugin V2
Added Code 3 of 9 (and Code 3 of 9 ASCII) can now use Weight 10 Module 11 check digit
Added support to Mifare Ultralight EV1 Tag (Win only)
Added support to new generation of OMNIKEY readers (5022, 5122, ...) (Win only)
Added support to Mifare Ultralight EV1 in Omnikey (Win only)
Updated Danish and Swedish languages
Added Thai and Burmese languages
Updated general token in cardPresso License window
Added Canon SDK option to take photo with flash from live mode (Win only)
Fixed Canon camera missing from image source list (Win only)
Fixed focus issue with Canon when in live acquisition (Win only)
Fixed options to upgrade available when Net License Client
Fixed issue with Movable license getting lost constantly
User Interface
New application theme
Simplified Welcome View
Customizable Production Mode (background, logo, fields arrangement)
Improved navigability between views
Print window unification (old Print + Print Settings)
Fix CSS issues in Mac OSX and Windows
Fix text buttons on table view cut text in different languages.
Fix issue with special characters in column names when loading old cards.
Fix issue when DB custom column ordering
Support image name from database columns (+ concatenation) when using indexed images
Add Zebra ZXP9 support
Add Fargo HDP5600 support
Add IDP Smart-51 support
Fix UV with Datacard XPS driver printers
Fix read magnetic data with Evolis printers
Add SpringCard H663 support
Add DUALI Single Wire Mifare tags support (Datacard printers)
Add Omnikey 5022 support
Add tag ISO 15693 support on encoder Elatec Multi ISO
Updated all languages translations
Add Persian language
Add card model 140x88
Check for updates
Add access to Product Selector from the welcome view
Integration & personalized operations
Add MRZ support via script
Change DB connection by command line
Add support for WebSockets client via script
Save card document via script
User Interface
Date field option “Fill new record with current date” reviewed
Fixed color palette transparency issues
Added JPEG image support on import images
Fixed concatenation From Database Not Stretching
Fixed layouts not showing properly on tree and accordion dockbar types
Fixed icons from Database Edit being overlapped and cut
Added support for Access ACCDB database files when using MS Access File Driver
Updated Smart50 SDK – supports Smart 30 and Smart 50 (Win only)
Revert option rotate back in Magicard (Win only)
Integration & personalized operations
Implemented Canon EOS SDK version 3.5 (Win only) - full list here
Added conf option to set application default font
Added option to set database filter
Centrify express download
User Interface
Event running in the proper layout when using multi-layouts.
Added Flip Text Horizontally and Vertically Option.
Changed default (when not current date) Date & Time to 1st day of the year
Added 'Do not print Background' and 'Apply color to front and back' background options
Add columns wrap option in Browse View
Added support for Magicard driver version 2.0.25+
Add support to DNP CX-D80H
Update NUVIA contactless card movement
Added possibility to configure Audit Report with groups of operations (Design, Print,...)
Integration & personalized operations
Added script command to Save Document
Added script command to Quit App
Added script command to configure/get item property
Added Silent Uninstall Options RemoveFiles/KeepFiles (**)
Added Nepali Language
User Interface
Fixed Database Buttons size
Keyboard Input during the print job as empty
Added Barcode Symbol – QRCode 2005
Improve Photo Editor Resolution Dialog
Print Issues
Fix cardPresso issue with HDP5600
Fix Database Find with Date Field Issue
Fix Encode Script during print Utf8 encoding
Added currentRecord functions print through script commands
Added document to print through script commands
Added function to get and save database path
Added current Date Time to cardPresso.log
Updated Translations:
User Interface
Users View improvements:
Show only Groups that the user is on
Show only Users that aren’t in a group that the user is not
Display Permissions Only when Group has Group Permissions
new keyboard shortcut Save As Action Shortcut (CTRL+SHIFT+S)
Barcode EAN8, EAN13 and EAN4 (plus addiction’s ex. EAN8 +2)
Print Issues
New options added to Auto Print feature
Added Magicard Helix
Added Printer Magicard Xtended
Double click in browse view jumps to record view
Possibility to change column name in form column properties
Edition allowed renamed to Editing allowed
Possibility to change column order in connection wizard
Title and Subtitle changed in database connection wizard Order page
Point to image added SVG extensionExcel
Driver able to detect “Time” fields.
Excel Driver added other Date and Time Formats
StartsWith/endWith Database Find/Filter
New commands added
Added after Read Magnetic event.
SCM/Indentive - Add support for AT88SC1003 read/write.
Get database columns names via Script
ES and PT
Updated Translations:
User Interface
- Image Fit Options.
- Added 'Browse image from disk' button at the bottom of Backgrounds dockbar.
- Adder Scroll area to Edit View to avoid overlapping buttons - Set Scroll Policy.
- Point Size always in Auto.
- CR80 always as first card in card list.
- Database columns in Browse View keep width settings.
- Add Delete Selected button in Browse View.
- Word-Wrap Auto-Point size.
- Superscript/Subscript added functionality.
- Traditional Chinese Tokens Updated/Corrected.
- Production Mode added functionality.
- Order CardModels by XML.
- Danish Tokens Updated.
- New Database View.
Print Issues
- Add Evolis Kiosk range printers.
- Added NiSCA PRC-101.
- Added Matica XID 8600.
- Buttons Edit+Acquire in Database and in card Item.
- Add shift selection database to Browse View.
- File Maker compatibility Date type implemented.
- Add shift selection to database Browse View.
User Interface
- Adding an image in card design as Portrait.
Print Issues
- Printing UV with Nisca PR-C201 recognized as generic printer.
- Add XM-LA license with ODBC permissions.

User Interface
- Implemented Barcode GS1 DataBar Expanded Stacked
- Add Escape Sequences option to barcode EAN128 settings
- Add Ultralight LOCO and HICO cardModel
- StepOver Signature Pad’s - Implementation
- Set Device as Blocked if It Fails to Enumerate and Send Message
- Add a config file to change the default port that Net License uses
- Add cardModel ContactCardChipDown
- Add a config file to change the default port that Net License uses
- AVFoundation Implementation
- Added cardModels DESfire + hico and - DESfire + loco
- Added Inkjet templates
- Added .otf format
- DESfire/hico cardModel
Print Issues
- Add Settings CONNECTEDVIAETHERNET on Evolis Printers
- Implemented Evolis EoE » Non Direct Comunication
- Added Autoprint Silent run of cardPresso
- Database Bug Excel DB date field loses settings
- Database Bug Using a CSV file with more than 10 columns cardPresso doesn't recognize the header
- Implement Mifare Classic Value Blocks

Centrify Express Download

User Interface
- ePad II implementation
- Fixed Mag stripe increase when dropped
- Canon SDK 2.15 implementation for automatic mode
- Control Font Option Black through script
- Change Text Item Letter Spacing through scripts
- Barcode character “@” view problem fixed
- Barcode intervelead 2 of 5 (add check digit MOD 10)
- New Event before print and after keyboard input. (Before preparing card)
- Added Inkjet category
- Text bug at higher DPI's - Selecting Camera’s Best Resolution
- On New Document Couldn't Read Selected .cardModel Version (xl.xml)
- Incorrect space between text (Arial) when increasing size
- Layout not changed after printing fixed
- Fix change text item point size when changing the size in decimal
Print Issues
- Read magnetic stripe during print
- Evolis Avansia implementation
- Date fields problem with MS Access fixed
- Increase Number of Records shown in Dabatase Find
- Database Counter Largest Value
- Excel and Access
- SLE encoding with Identive SDI0X implementation in API2
- Omnikey SLE API Implementation
- Allow printer script API to move card to any position
- SRTAG64K Implementation - NFC Tag4 ***
- DESFire Master Key cannot be changed with AES fixed
- HID Prox Implementation
- Crazy Writer Mifare Key B error
- ISO15693 Implementation
- Cloud 4000 F Contactless encoder is being recognized as Contact
- Added Compatible SLE 4442 ATR’s
- SCM encoders doesn't recognize Mifare Cards
- Mifare Wizard Write from Database to a Mifare classic tag
User Interface
- Objects do not respect card orientation with mag card types
- cardPresso doesn't warn about the font change when .card is opened in other computer
- Rendering barcodes without keeping the ratios
- Fixed deleting layouts with background
- Wizard for DESFire “Card item to DESFire file” is incorrect using item object
- Mifare Classic write trailer wizard error
User Interface
- Improved design to display options correctly in multiple languages using the dockbar with Tree, Accordion or Tabs
- Added cardPresso translations
- Implemented a default image export format
- Fixed Hebrew, Thai and Arabic characters recognition
- Fixed issue with text being cut
- Implemented automatic display of the Encode View’s dockbar
- Improved Shrink to Fit behavior
- Added options to User Permissions
- Fixed issue with displaying the Users View upon opening
- Fixed issue with Photo Editor initialization
- Added support to Polaroid’s P2500S, P3500S, P4500S and P5500S printers
- Fixed issue with using Canon Powershot SX150is for live image acquisition
- Improved Photo Editor behavior
- Improved fingerprint capture behavior
- Added watermark removal when a card file created in Demonstration mode is reopened with a license
- Added possibility to save file multiple times when in Demonstration mode
- Added Mac install info into cardPresso’s Help file
- Implemented compatibility with server cluster environments
Print Issues
- Added Grayscale Overlay format
- Overlay disabled by default on all printers
- Fixed Overlay/UV design application with ZXP7 printers
- Implemented Overlay and F Panel for HiTi CS200e printers
- Fixed card feed issue with ZXP8 printers
- Fixed card feed issue with Magicard printers
- Improved CSV configuration window
- Added Database as Image source for XXS and XS editions
- Fixed Indexed Image settings behavior
- Fixed Layout Auto-select based on database condition behavior
- Fixed issue when performing drag and drop from the Database tab
- Fixed DESFire encode operations with SCM Identive encoders
- Fixed execution of database related script events
- Fixed SLE4442 cardModel
- Improved manual addition of encoder
- Improved card movimentation for Prox encoders with HDP5000 printers
- Implemented script instruction for Lock operations in Mifare Ultralight cards
- Fixed PCSC error with Generic Encoder
- Implemented Mifare DESFire script and wizards - Implemented Mifare Classic script and wizards

Centrify Express Mac

- Black panel management improved
- Reviewed cardPresso's Help menu
- Improved Arabic characters recognition
- Fixed Local User installation issues
- Improved Properties window size adjustment
- Added new image manipulation methods
- Implemented AC/SC messages for encode operations
- Fixed issue with .card losing data upon opening
- Added Database Import Feature
- Implemented CrossMatch's Fingerprint Reader
- Implemented Digital Persona's Fingerprint Reader
- Improved upgrade coupon features
- Removed support for MF200 encoders
- Implemented Castles' EZ100pu (for SLE4442 cards)
- Implemented ACS' ACR38 (for SLE4442 cards)
- Added .xlsm file extension to supported file types
- Improved Kimaldi's RW125k support
- Implemented Elatec's TWN3 Multi125 USB
- Implemented Elatec's TWN3 Mifare USB
- Improved special characters recognition from Oracle databases
- Fixed Font related layout design issues
- Improved Contactless encode operations
- Implemented data manipulation features (through script) for different database table sources
- Implemented EWTJ-680 (for Mifare Classic cards)
- Added License Check during cardPresso's installation process
- Implemented Cloud 4000 F (for Mifare Classic cards)
- Fixed IDP Smart 50 issues with encode operations
- Improved Fixed Size database's recognition
- Fixed background read error for Magnetic card types
- Added Note property to DESFire NFC VCard's
- Implemented Overlay/F Panel support for Fargo's HDP5000
- Implemented EMF image files support
- Improved Thai characters recognition
- Solved Update After Print issues with several database types
- Improved Zebra's ZXP7 support
- Fixed temporary file's creation issues
- Implemented Module 11 option for Code 39 barcodes
- Implemented Cyrillic characters support for encode operations
- Fixed database position issues when entering new records
- Added encode script wizards for Mifare Classic cards
- Improved Printer Tools options for Evolis printers
- Reviewed cardPresso translations
- Implemented Evolis Elypso printer model
- Fixed Magnetic encode options with HiTi CS-200e
- Implemented NFC URI for Mifare Ultralight C
- Improved cardPresso translations

Centrify Express For Smart Card

- Improved Image Acquisition using Twain
- Improved using hyperlinks as Indexed Images source
- Implemented Layout auto-selection with multiple database conditions feature
- Fixed Conditional Print options for Excel and MS Access databases
- Added Encode compatibiity for the latest UltraMagicard drivers
- Reviewed Net License service timeouts
- Implemented Database Column Alias feature in Database Properties
- Fixed Database Properties icons
- Implemented Non Magnetic Macros through script
- Improved License detection operation
- Fixed script sample for DESFire card type
centre-klimat.ru – 2021