Transcription

1 MilitaryCAC's Information on the importance of DoD Certificates#316a Page 1 of 11 Search MilitaryCAC: Site Map Search com us ml mobi net org Please Also available at: website with your friends and colleagues The Definitive Source for Everything CAC Common Access Card help for your Personal Computer Installation Steps Step 1: Obtain a CAC Reader Step 2: CAC Reader driver / Video Step 3: DoD Certificates / Video Step 4: ActivClient Step 4a: Update ActivClient Step 5: IE adjustments Video Log into a CAC enabled website now STEP 3: INSTALL the Department of Defense (DoD) CERTIFICATES Video Instructions InstallRoot installs the DoD Root certificates onto your Windows computer If the Enterprise site won't load, the website you are visiting is prompting you with the message the site is not trusted, you have received a new CAC, or your DoD website worked up until recently and doesn't now, you need to update your DoD certificates Apple computer users follow these instructions Windows RT users follow these instructions InstallRoot 41 was issued on 13 February 2015 Some computers receive the following error messages when trying to install the InstallRoot 41 file: "The signature of this program is corrupt or invalid" or "IntallRoot_41x64msi was reported as unsafe" or "This installation package could not be opened Verify that the package exists and that you can access it, or contact the application vendor to verify that this is a valid Windows Installer package" when trying to install the 41 version below

2 MilitaryCAC's Information on the importance of DoD Certificates#316a Page 2 of 11 If you receive any of these on your computer, install the Former 316a version Download InstallRoot 41 from: MilitaryCAC AKO Or one that matches your Windows Operating System: Download 64 bit InstallRoot 41 from: MilitaryCAC AKO DISA Download 32 bit InstallRoot 41 from: MilitaryCAC AKO DISA

3 MilitaryCAC's Information on the importance of DoD Certificates#316a Page 3 of 11 Select Next > Select Next >

4 MilitaryCAC's Information on the importance of DoD Certificates#316a Page 4 of 11 Select Next > Select Install

5 MilitaryCAC's Information on the importance of DoD Certificates#316a Page 5 of 11 Wait Select Yes Select Close

6 MilitaryCAC's Information on the importance of DoD Certificates#316a Page 6 of 11 Double click new shortcut on your desktop Click Install Certificates Select Yes

7 MilitaryCAC's Information on the importance of DoD Certificates#316a Page 7 of 11 Select OK Verify you have DOD CA-25 through DOD CA-32 & DOD CA-25 through DOD CA 32 by opening Internet Explorer, Tools, Internet Options, Content (tab), Intermediate Certification Authorities (tab) Former DOD InstallRoot 316a was issued on 5 March 2013 Download InstallRoot 316a from MilitaryCAC or from official mil download links below Run the InstallRoot_v316Aexe file from inside the zip folder NOTE: Some people "may" need to Right click the file and Run as Administrator InstallRoot Installation Instructions: Select Run when prompted to Run or Save the file, you will see a black DOS window show on your screen, and have words scrolling in it When it goes away, you have installed the DoD certificates on your computer NOTE: You may see a message that the file might not have installed correctly Select "This program installed correctly" Download and run the Cross Cert Remover tool You can install both the InstallRoot 316a and the Cross Cert Removal tool 110 in one single file which was created by NETCOM (Army Network Enterprise Technology COMmand) This file is created for Home Users ONLY, you can download it from: MilitaryCAC

8 MilitaryCAC's Information on the importance of DoD Certificates#316a Page 8 of 11 or AKO If you see "There is a problem with this website's security certificate" after installing the DoD InstallRoot file above or the Red Certificate error below, follow this guide PROCEED TO STEP 4 - INSTALL ACTIVCLIENT Alternate download links for the 316a version of DoD certificates: Army Knowledge Online (username / password) 316a a Your Internet Explorer may prompt you with a banner stating it blocked this site from downloading files to your computer Click the box for the option to Download File Nothing will happen, go back and click the link above again Now you'll see the option to Run, Save, or Cancel -or- Washington Headquarters Services Run the InstallRoot_v316Aexe file from inside the zip folder / file Select Run when prompted to Run or Save the file, you will see a black DOS window show on your screen, and have words scrolling in it When it goes away, you have installed the DoD certificates on your computer

9 MilitaryCAC's Information on the importance of DoD Certificates#316a Page 9 of 11 NOTE: You may see a message that the file might not have installed correctly Select "This program installed correctly" Defense Information Systems Agency (DISA) Information Assurance Support Environment (IASE) Public Key Enablement (PKE) - Public Key Infrastructure (PKI) site Run the InstallRoot_v316Aexe file from inside the zip folder / file Select Run when prompted to Run or Save the file, you will see a black DOS window show on your screen, and have words scrolling in it When it goes away, you have installed the DoD certificates on your computer NOTE: You may see a message that the file might not have installed correctly Select "This program installed correctly" -or- -or- Navy Information Assurance website Select Run when prompted to Run or Save the file, you will see a black DOS screen show on your screen, and have words scrolling in it When it goes away, you have just installed the DoD certificates on your computer NNOTE: You may see a message that the file might not have installed correctly Select "This program installed correctly" Information: A certificate is a digital document providing the identity of a Web site or individuals DoD Web sites use a certificate to identify themselves to their users and to enable secure connections If you are receiving a warning that a site is untrusted / insecure, you will need to install the "DoD Certificates" In order to access sites enabled with a DoD PKI certificate without being prompted to accept the DoD Certificate chain at each log on [like Firefox and Safari do], people using Internet Explorer and Chrome should install the certificates These are separate from the personal certificates that are on your CAC, but they are related Root Certificates How can you (or your web server) trust the identity of someone over the network? An infrastructure of trusted third parties has been put in place to distribute trust between end-users This infrastructure verifies that we are who we say we are If we trust the DoD PKI infrastructure, then the infrastructure can vouch for us to trust others that have certificates issued from the DoD PKI

10 MilitaryCAC's Information on the importance of DoD Certificates#316a Page 10 of 11 Click to see full size image The DoD PKI Infrastructure is comprised of two Root Certification Authorities and a number of Intermediate Authorities If all of the DoD root certificates are not installed on your computer, various applications will not be able to trust all DoD PKI certificates More information about this image can be found here: Non zip version of the InstallRoot 316a file above

11 MilitaryCAC's Information on the importance of DoD Certificates#316a Page 11 of 11 Non zip version of the InstallRoot 3161a file above If you have questions or suggestions for this site, contact Michael J Danberry Are you interested in subscribing to the CACNews list? Disclaimer ACRONYM Reference Page Last Update or Review: Thursday, 03 December :52 hrs The following domain names all resolve to the same website: ChiefsCACSitecom, CommonAccessCardus, CommonAccessCardinfo, & ChiefGeekus