Skip to content

Instantly share code, notes, and snippets.

@reidab
Created January 31, 2016 22:36
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save reidab/af8d075477d16e7a0b81 to your computer and use it in GitHub Desktop.
Save reidab/af8d075477d16e7a0b81 to your computer and use it in GitHub Desktop.
Telia / Skatteverket e-legitimation on OS X El Capitan (10.11)

A few notes on what I did to get Telia's outdated e-ID software working on the most recent Mac OS using a Gemalto ID Bridge CT30 card reader.

This may require disabling El Capitan's System Integrity Protection. I did this early in my troublehooting process and haven't yet tested things with it enabled.

  1. Telia's Net iD site blocks newer "unsupported" browsers, either download Firefox 42 or set your user agent to something in their supported browser list.
  2. You can download the Net iD software directly from: https://cve.trust.telia.com/TeliaElegNG/NetId/Download. Opening the installer gets you a nice blank window.
  3. Install Mozilla's NSS tools using Homebrew: brew install nss. This probably isn't necessary if you don't care about Firefox, but its UI and tools around this stuff seem a bit more transparent than the system-level keychain stuff that Safari uses.
  4. Rename the installer to something without spaces in it, like net_id_setup.app (sigh).
  5. Go find the installation scripts: cd net_id_setup.app/Contents/Resources/setup
  6. If you installed NSS, edit install_pkcs11.sh and fix the MODUTIL path on line 4 to read MODUTIL=/usr/local/opt/nss/bin/modutil
  7. sudo ./install
  8. The installed Net iD app in /Applicatons/Utilities should now show your card and sign-in should work in Safari, Firefox, and Chrome. Chrome doesn't use the Net iD UI, so you may have to click an extra link to force login even though the plugin isn't detected.
  9. If everything's working, you should see be able to see a Telia IAS-EEC v1 keychain in the sidebar of Keychain Access. Sometimes this doesn't show up on initial attachment of the card reader, so you have to reseat the card.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment