This repository contains scripts for building an installer for OSX that ensures your system can detect and use CCID enabled YubiKeys. The way this is done differs depending on what version of OS X you are running. If you’re just looking for the actuall installer to run, you can use the link below.
Download the installer: ifd-yubico.pkg
OS X ships with libccid, which supports all CCID enabled YubiKey devices. However, it contains a whitelist of compatible devices, and the list that ships with the OS is missing several entries that are needed for YubiKeys to be detected. On these systems the ifd-yubico installer will patch the existing list and add all needed entries.
Due to the new "rootless" security feature of 10.11, it is no longer possible to patch the existing libccid device list. Instead, the installer will install a custom built version of libccid in parallel to the original one, with it’s own device list containing all YubiKey devices.
If you’re just looking for an installer to use, just download a pre-built one from the releases page. If you want to build it yourself, first download the following dependencies into the root directory of the repository, then run ./build-installer.sh. The resulting installer, ifd-yubico.pkg, will be created in the output directory.
|
Note
|
You will need OS X 10.11 to build the installer. |
To build the installer you will need the source code for libusb 1.0.9 as well as libccid 1.4.20. These are available from the following pages:
You also need pkg-config, which can be installed using for example Homebrew.