如何在Ubuntu 23.10系统中搭配Chrome浏览器使用外接USB CAC读卡器及CAC卡？

Hey folks, I recently went through the process of getting my CAC reader and card working with Google Chrome on Ubuntu 23.10, and I wanted to share exactly what worked for me. This isn't a question—just a step-by-step how-to based on my own experience.

Step 1: Start with the reader disconnected #

Before you do anything else, make sure your CAC card reader is not plugged in to your computer. We'll connect it later once the setup is done.

Step 2: Install necessary packages and start the pcscd service (as root) #

You'll need to install a set of packages to get everything working. Open your terminal and run these commands as root (use sudo if you have that set up):

apt install opensc-pkcs11 libpcsclite1 libpcsclite-dev pcscd pcsc-tools sssd libpam-sss libnss3-tools gnutls-bin

Once the installation finishes, enable and start the pcscd daemon—this is what handles communication with the card reader:

systemctl enable pcscd
systemctl start pcscd

Step 3: Check existing PKCS #11 modules (as a regular user) #

Now switch back to your standard user account (don't use root for this part). Run this command to see which PKCS #11 modules are currently available on your system:

modutil -list -dbdir $HOME/.pki/nssdb/

Here's what the output looked like on my system:

Listing of PKCS #11 Modules

1. NSS Internal PKCS #11 Module
uri: pkcs11:library-manufacturer=Mozilla%20Foundation;library-description=NSS%20Internal%20Crypto%20Services;library-version=3.98
slots: 2 slots attached
status: loaded

slot: NSS Internal Cryptographic Services
token: NSS Generic Crypto Services
uri: pkcs11:token=NSS%20Generic%20Crypto%20Services;manufacturer=Mozilla%20Foundation;serial=0000000000000000;model=NSS%203

备注：内容来源于stack exchange，提问作者Ralph Crongeyer