ADmitMac for CAC 2.0

ADmitMac for CAC(AFC) securely integrates U.S. Department of Defense Common Access Cards (CAC) with Apple Macintosh computers. AFC provides a single sign-on environment, verifying a CAC against a centralized network authority. AFC obtains Kerberos tickets using CAC certificates, makes these tickets available to “Kerberized” applications, locks the computer upon removal of a CAC, and protects the computer from unauthorized use when it wakes from sleep.

Security goes far beyond a simple verification of the PIN against the CAC. With AFC, the card itself is challenged to ensure that neither the card nor the privileges granted the user have been revoked. When a CAC is inserted into a Macintosh, AFC changes the normal login screen and challenges the user to enter their CAC PIN authorization. Upon verification of the user’s PIN, AFC then obtains the proper network credentials from the Active Directory.

AFC includes its own PKINIT (Public Key Cryptography for Initial Authentication in Kerberos) that enables this secure integration.


Single sign-on environment
Never requires the use of passwords to login or to mount network volumes
Automatically locks the computer upon removal of the CAC
JITC Certified