Search MilitaryCAC:

Site Map

MilitaryCAC.com logo

.com | .us | .ml  | .mobi | .net | .org


The Definitive Source for Everything CAC

Common Access Card help for your
P
ersonal Computer

Also available at:

https://MilitaryCAC.com

Please ShareThis website with your friends and colleagues

Make a Donation button image

 

 

 

STEP 3:  INSTALL the Department of Defense (DoD) CERTIFICATES

Installation Steps

Step 1: Obtain a CAC Reader
Step 2: CAC Reader driver / Video
Step 3: DoD Certificates
Step 4: ActivClient
Step 4a: Update ActivClient
Step 5: IE adjustments | Video
Log into a CAC enabled website now
 
 

 

InstallRoot automates the install of the DoD Root certificates onto your Windows computer

 

If you want to access DoD websites from your Windows computer, you need this file.  You may need to reinstall them if the CAC enabled web site won't load, the website you are visiting is prompting you with the message there is a problem with the website's Security Certificate / site is not trusted, you have received a new CAC, or your DoD website worked up until recently and doesn't now.

 

 Apple computer users follow these instructions

 

Windows RT users follow these instructions

 

 

InstallRoot 4.1 was originally issued on 13 February 2015

 

 

Download InstallRoot 4.1 from:
MilitaryCAC,     AKO,   or   DISA

 

(It is the same file from 3 different locations, in the event one doesn't work)

 

 

WelcomeToTheInstallRootSetupWizard

Select Next >

. 

ChooseAFileLocation

Select Next >

InstallRootFeatures

Select Next >

BeginInstallationOfInstallRoot

Select Install

InstallationProgress

Wait

InstallRoot41UAC

You may need to Select Yes

.

InstallRootHasBeenSuccessfullyInstalled 

Select Close, or Run InstallRoot

.

InstallRoot 4.1

If you selected Close, Double click new shortcut on your desktop

.

InstallRoot 4.1 

If you have Firefox installed, you may see 2 tabs, Click Install Certificates

.

Security Warning

If you see this screen, Select Yes

.

Select OK

.

Internet Options

Open Internet Explorer, Select Tools (Gear), Internet Options

 

Content-Certificats

Select Content (tab), Certificates (button)

 

27-32

Intermediate Certification Authorities (tab) scroll to verify you have:

DOD CA-27 through DOD CA-32

 

Email 27-34

DOD EMAIL CA-27 through DOD EMAIL CA 34

 

Email39-44

 DOD EMAIL CA 39 through DOD EMAIL CA 44

 

ID33-34

 DOD ID CA-33 through DOD ID CA-34

 

ID39-44

DOD ID CA-39 through DOD ID CA-44

 

ID SW 35-38

DOD ID SW CA-35 through DOD ID SW CA-38

 

and

 

DOD ID SW CA-45 through 46

DOD ID SW CA-45 through DOD ID SW CA-46

 

also

 

Trusted Root Certification Authority

Open Trusted Root Certification Authorities (tab) verify you have:

DoD Root CA 2, and DoD Root CA 3

 

 flag bar

 

If you see "There is a problem with this website's security certificate" after installing the DoD InstallRoot file or the Red Certificate error below, follow this guide

Security Error

Certificate Error

 

 

PROCEED TO STEP 4 - INSTALL ACTIVCLIENT

 

 

Former DOD InstallRoot 3.16a was issued on 5 March 2013

DO NOT use this version if your CAC is CA 33 or above

 

Download InstallRoot 3.16a from MilitaryCAC or from

official .mil download links below

Run the InstallRoot_v3.16A.exe file from inside the zip folder

.

NOTE:  Some people "may" need to Right click the file and Run as Administrator

 .

InstallRoot Installation Instructions:
Select Run when prompted to Run or Save the file, you will see a black DOS window show on your screen, and have words scrolling in it.  When it goes away, you have installed the DoD certificates on your computer.
NOTE:  You may see a message that the file might not have installed correctly.  Select "This program installed correctly."

 

Download and run the Cross Cert Remover tool

 

You can install both the InstallRoot 4.1 and the Cross Cert Removal tool in one single file which was created by NETCOM (Army Network Enterprise Technology COMmand)

This file is created for Home Users ONLY, you can download it from:

 

updated imagehttps://militarycac.com/CACDrivers/HomeUserCertTool_V04.zip 

 

flag bar

 

 

Alternate download links for the 3.16a version of DoD certificates:

 

Army Knowledge Online (username / password)

 

3.16a https://ako.us.army.mil/suite/doc/39479923

3.16.1a https://ako.us.army.mil/suite/doc/42460657

 

Your Internet Explorer may prompt you with a banner stating it blocked this site from downloading files to your computer.  Click the box for the option to Download File.  Nothing will happen, go back and click the link above again.  Now you'll see the option to Run, Save, or Cancel.

 

-or-

 

Washington Headquarters Services

CAC Required image

https://customerresources.whs.mil/IPM/Certificates/DoDRootCertificate/unclass-installroot_v3-16a.zip

Run the InstallRoot_v3.16A.exe file from inside the zip folder / file. 
Select Run when prompted to Run or Save the file, you will see a black DOS window show on your screen, and have words scrolling in it.  When it goes away, you have installed the DoD certificates on your computer.
NOTE:  You may see a message that the file might not have installed correctly.  Select "This program installed correctly."

 

-or-

 

Defense Information Systems Agency (DISA) Information Assurance Support Environment (IASE) Public Key Enablement (PKE) - Public Key Infrastructure (PKI) site

 

http://iase.disa.mil/pki-pke/Documents/unclass-installroot_v3-16-1a.zip

Run the InstallRoot_v3.16A.exe file from inside the zip folder / file. 
Select Run when prompted to Run or Save the file, you will see a black DOS window show on your screen, and have words scrolling in it.  When it goes away, you have installed the DoD certificates on your computer.
NOTE:  You may see a message that the file might not have installed correctly.  Select "This program installed correctly."

 

-or-

 

Navy Information Assurance website

CAC Required image

https://infosec.nmci.navy.mil/PKI/installroot_v3.16a.exe

Select Run when prompted to Run or Save the file, you will see a black DOS screen show on your screen, and have words scrolling in it.  When it goes away, you have just installed the DoD certificates on your computer.
NNOTE:  You may see a message that the file might not have installed correctly.  Select "This program installed correctly."

 

 
Information:
A certificate is a digital document providing the identity of a Web site or individuals.  DoD Web sites use a certificate to identify themselves to their users and to enable secure connections.  If you are receiving a warning that a site is untrusted / insecure, you will need to install the "DoD Certificates."  In order to access sites enabled with a DoD PKI certificate without being prompted to accept the DoD Certificate chain at each log on [like Firefox and Safari do], people using Internet Explorer and Chrome should install the certificates.  These are separate from the personal certificates that are on your CAC, but they are related.

 

 

Root Certificates

 

How can you (or your web server) trust the identity of someone over the network?  An infrastructure of trusted third parties has been put in place to distribute trust between end-users.  This infrastructure verifies that we are who we say we are.  If we trust the DoD PKI infrastructure, then the infrastructure can vouch for us to trust others that have certificates issued from the DoD PKI.

DoD Root Hierarchy image

Click to see full size image

.

The DoD PKI Infrastructure is comprised of two Root Certification Authorities and a number of Intermediate Authorities.  If all of the DoD root certificates are not installed on your computer, various applications will not be able to trust all DoD PKI certificates.

 

Fed Cross Cert image 

More information about this image can be found here:  http://iase.disa.mil/pki-pke/interoperability/Pages/index.aspx

 

 

Non .zip version of the InstallRoot 3.16a file above

 

Non .zip version of the InstallRoot 3.16.1a file above

 

If you have questions or suggestions for this site, contact Michael J. Danberry

Are you interested in subscribing to the CACNews email list?

Disclaimer

 

ACRONYM Reference Page

 

GoDaddy Site Certified seal

 

Last Update or Review:  Wednesday, 20 April 2016 21:48 hrs

 

The following domain names all resolve to the same website:  ChiefsCACSite.com, CommonAccessCard.us, CommonAccessCard.info, & ChiefGeek.us