Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-5774: How to enable smartcard support in NSSDB apps (Firefox, Thunderbird, etc) after updating to OS X 10.11

Centrify Identity Service, Mac Edition ,  

12 April,16 at 11:46 AM

Applies to: Centrify Identity Service for Mac version 5.2.4 with OS X 10.11 El Capitan


When upgrading the Centrify agent from an earlier release to version 5.2.4 (with OS X 10.11 support), the path to the pkcs11 library in NSSDB applications (such as Firefox, Thunderbird, etc.) will be incorrect, causing smart card support to fail.

How can this be fixed?


The module needs to be reloaded with the correct path:
  1. Open the Firefox Preferences menu and go to:
    • Advanced -> Certificates -> Security Devices

      User-added image
  2. Select "Centrify PKCS #11 Module" and click [ Unload ], confirm when prompted
    • User-added image
  3. After the previous entry is unloaded, select [ Load ] and enter:
    • Module Name: Centrify PKCS #11 Module
    • Module filename: /usr/local/share/centrifydc/lib/pkcs11/
      • User-added image
  4. The smart card should now appear under this newly loaded module.
    • User-added image

This will be fixed in a future release of the Centrify agent.

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.