CAC USE ON MOBILE DEVICES
NOTICE: The links to vendors / products on this page are an attempt to save you time searching for the specific item, by linking you directly to the item shown. You will notice I have multiple [when available] vendors to choose from. I have no personal preference as to who you decide to purchase from. I am not endorsing any particular product or vendor, I'm merely informing you what works and where you can purchase a CAC reader.
Please be aware of this Memorandum on DoD Commercial Mobile Device (CMD) Interim Policy from DoD dated 17 January 2012.
Section 2.2.6 states: Non-enterprise activated CMDs shall not process or store official DoD email. Access to DoD webmail services shall follow policy statement 2.2.5.
Section 2.2.5 states: Non-enterprise activated CMDs shall follow existing policy when accessing web-based services authorized for external access, which stores sensitive DoD information. Combatant Command/Service/Agency's (CC/S/A)'s are encouraged to implement technical controls that prevent sensitive DoD information from being downloaded and stored.
Updated Memorandum dated 31 July 2012
DoD Releases Commercial Mobile Device Implementation Plan - 26 February 2013
Air Force is going mobile, see two articles from 19 February 2013 at Defense Systems
Please sign up for the Free Change Detection service at the top of this page to be automatically notified when new information is posted on this page. I will post information regarding these growing questions here as soon as I know about it.
The Microsoft Surface Windows 8 Pro went on sale on 9 February 2013. This version has the ability to install and use regular Windows programs.
The Microsoft Surface Windows RT went on sale 26 October 2012 and has an ARM processor and IS NOT able to install and use regular Windows programs. You can check your Enterprise Email with a CAC reader after you install the DoD Certificates.
Microsoft Surface User Guide (a 68 page guide written for both the Surface Windows RT & Surface Windows 8 Pro)
The Microsoft Surface Windows RT will allow you to access sites like OWA (IF you have the "GEMALTO TOP DL GX4 144," "GEMALTO DL GX4-A 144," "Oberthur ID One 128 v5.5 Dual," or "G&D FIPS 201 SCE 3.2" CACs). All other CAC types are incompatible.
Four companies offer readers and software for iPhone / iPads
Precise Biometrics Tactivo family of readers
17 December 2014: DLA orders 1100 Tactivo Readers
1 October 2014: Reduced pricing on the Tactivo readers shown below
14 March 2014: Defense Systems article titled: The key to securing mobile assets with DoD
7 January 2014: Route1 Announces Support for Precise Biometrics' Tactivo Device
13 September 2013: Precise Biometrics announced a global ecosystem of applications for smart devices that integrates with its line of Tactivo smart card and fingerprint readers. Tactivo allows any iOS or Android app to utilize the security and convenience of smart cards and fingerprint recognition. The new ecosystem contains several types of app solutions such as email encryption and signing, secure browser and many others.
Prices below are hardware ONLY
Browser, Email, and CAC/PIV-validation apps from Intercede MyID are available on the Apple App Store. Contact bruce.hassett at intercede.com for additional information.
NOTE: Most DoD users will be able to use the MyID Browser app for access to OWA (non-S/MIME) for email. The MyID Mail app can only be used if you have a direct connection to the ActivSync Server.
NOTICE: Tactivo for iPhone 6 (NOT 6 plus) – contact: jeff.scott at precisebiometrics dot com to order.
Thursby Readers and PKard for iOS
23 June 2015: All 30-pin readers (plug-in and iPad 2/3 case readers) have been reduced to $89.99 each.
7 August 2014: Thursby Software released PKard for iOS version 2.1.4. This version allows access to Defense Travel System (DTS) on iPads ONLY. DTS has disabled the ability to view their site from iPhones. Contact DTS support desk to express your opinion
18 June 2012: Interviewed in SecureIDNews, Government ID, Smart Cards, Identification and Authentication article regarding Thursby's PKard for iOS and reader.
29 July 2013: Thursby releases metal CAC readers, (Press Release) which includes support for lightning plug devices like the iPad with Retina Display, iPad Mini, iPhone 5, & iPad Touch (5th generation).
2nd Generation PKard Reader hardware
Click picture to see a larger image
Lightning cases are $149.99
NOTE: If you Jail Break your iPhone, the PKard for iOS software will not work as it was designed.
iPad Air, iPad Mini, and iPad 2/3 case
Click picture to see a larger image
Some basic information:
Bundling clarification - "comparing apples to apples"
As always, bundle = hardware + US certifications + US secure browser / authentication agent + US phone and email support + $0 “maintenance"
GSA and volume pricing available directly from Thursby, or approved Federal resellers.
Identive's iAuthenticate reader for iPhone
Identive iAuthenticate Smart Card reader includes PKard for IOS software (prices range between $124.00 -$300.00 at the vendors below)
NOTE: iPhone 5, 6 series [and newest iPad & mini] users need a Lightning to 30 PIN adaptor $29.00 Another version for with a short cable for $39.00
Purchase the BaiMobile 3000MP Bluetooth CAC reader: iPhone ($289.00 + $49.20 (Bluetooth adaptor) + $57.80 (per year for annual middleware maintenance and support agreement). Use discount code: GOV001 to save 11%. Please know you will need an additional program the free baiMobile browser app (not sure where to find it). released on 22 May 2013
NOTE: iPhone 5 [and newest iPad & mini] users need a Lightning to 30 PIN adaptor $29.00 Another version for with a short cable for $39.00
BaiMobile and DISA using Android and Good (not available to general military population unless you already have a Good account on an Exchange server)
baiMobile 301MP Smart Card reader
Purchase the BaiMobile 301MP CAC reader for $124.95 + $23.95 (per year for annual middleware maintenance and support agreement). Use discount code: GOV001 to save 11%. Please know you will need an additional program like the baiMobile browser app (not sure where to find it).
Silanis (makers of ApproveIt) is working hard to bring mobile e-signatures to everyone
Outlook Web App Mini is how you'll view OWA on a small screen. With this ability and PKard for iOS, you have the ability to check your webmail on your iPhone or iPad.
Please know that even though CAC readers exist, they required an app to work with the Android OS. There are two company's with workable solutions, Thursby with PKard and Intercede's MyID which is a Browser and CAC/PIV-validation app that works with Tactivo and ACS readers. These are available by contacting Bruce.hassett at Intercede.com.
Thursby Android CAC readers
Click links below to see larger images, to purchase go to their website
Readers start at $24.99 each, app is another $79.99, totaling: $105.00
Citrix shows accessing Windows server via a test CAC using a Motorola Zoom Android tablet.
SCDroid is an app in Google Play, but does not offer any way to CAC authenticate to a web browser.
-- I've heard rumors that an app is being created by BaiMobile & SCM. Your Android device [phone or tablet] will have to be running 4.0 Ice Cream Sandwich (or above) and it keeps getting pushed out further and further.
-- Charismathics has a solution, however, their website doesn't show where to get the app / software. It only lists which CAC readers will work.
Information from baiMobile regarding the baiMobile 3000MP Smart Card reader
Purchase the BaiMobile 3000MP Bluetooth CAC reader: Android $289.00 + $57.80 (per year for annual middleware maintenance and support agreement). Use discount code: GOV001 to save 11%. On 6 October 2013, Bai added "baiBrowser" to the Google Play store, this app will let you use the baiMobile 3000MP reader on your Android device to authenticate to CAC enabled websites. However, please know it is still in testing. In my testing on 13 October 2013, I was only able to authenticate to AKO and the Air Force Portal. Sites like Enterprise Email and the DMDC sites for updating your GAL information did not work. They are aware of the issues and are working to find solutions.
baiMobile 301MP Smart Card reader
Purchase the BaiMobile 301MP CAC reader for $124.95 + $23.95 (per year for annual middleware maintenance and support agreement). Use discount code: GOV001 to save 11%, but please know you will need an additional program like the one mentioned below (which is still in beta testing). As of 13 October, this reader is not compatible with the existing Android baiBrowser (despite the fact it says it is). The next update of baiBrowser will include support for this reader.
NEWS: baiMobile is in the beta testing phase of getting their bai Browser reader for the Android market. Read more in the 22 May 2013 press release.
If you have questions or suggestions for this site, contact Michael J. Danberry
Are you interested in subscribing to the CACNews email list?
Last Update or Review: Friday, 11 September 2015 12:10 hrs
The following domain
names all resolve to the same website: ChiefsCACSite.com,
CommonAccessCard.us, CommonAccessCard.info, & ChiefGeek.us
The following domain names all resolve to the same website: ChiefsCACSite.com, CommonAccessCard.us, CommonAccessCard.info, & ChiefGeek.us