Foxshopping792

1. Dod Cac Card Reader Software Download
2. Cac Card Reader Software For Mac

InstallRoot automates the install of the DoD certificates onto your Windows computer

Solution1 (built-In Smart Card Ability): Uninstall ActivClient 6.2.0.x or 7.0.1.x by 'Right Clicking' the Windows logo '4 squares' in the lower left corner of your desktop, select Programs and Features (now called Apps and Features), find ActivClient in your list of programs and select Uninstall, restart your computer and try the sites again. SCR3310v2.0 USB Smart Card Reader. Part No: 905331. Identiv's SCR3310v2.0 is a small and ergonomic USB smart card reader with backside mounting holes. Card reader is not recognized. Shows up as 'STCII Smart Card Reader' C. Shows up as 'USB Smart Card Reader' (not necessarily a problem) D. Does not read your 'Gemalto TOP DL GX4 144', 'Oberthur ID One 128 v5.5 Dual' CAC. Does not read your CAC when using your Mac. NO TE: We are hearing Mac users having problems with the SCR-331 reader.

To access DoD websites from your computer, you need these certificates on your computer. You may need to reinstall the certificates if the CAC enabled web site won't load, the website you are visiting is prompting you with the message there is a problem with the website's Security Certificate / site is not trusted, you have received a new CAC, or your DoD website worked up until recently and doesn't now.

Apple computer users follow these instructions

Windows RT users follow these instructions (or anyone not wanting to install the InstallRoot 5.5 program below)

InstallRoot is created by DISA for Windows computers, if you have any problems with this file, please contact them.

NOTE: If you do not want to install the InstallRoot program, or having problems with the InstallRoot file, you can install the certificates manually by, following these instructions.

Windows users, Download InstallRoot 5.5 from:

MilitaryCAC (.msi version) (27.7 MB),

MilitaryCAC (.zip version) (25.9 MB), or

DoD Cyber Exchange (.msi version) (27.7 MB)

(It is the same file [except for .zip version] from two different servers, in the event one of the links don't work)

Dod Cac Card Reader Software Download

Select Next >

.

Cac Card Reader Software For Mac

Leave the default installation location, then select Next >

.

Select Next >

.

Select Install

.

Wait for it

.

.

Select Run InstallRoot

.

.

Click Install Certificates

If you have Firefox installed, you may see 2 or 3 tabs

NOTE: I have one report that a person had to select Restart as Administrator. This was the first and only person in the several years this program has been in existence that I have heard this.

InstallRoot not updating was fixed in InstallRoot 5.2

Select Yes, (this screen may show 2 - 4 times) as it is installing each of the DoD Root CA 2, 3, 4, & 5 certificates

.

Select OK (your number of Adds will vary)

.

How to verify you have the certificates installed

Open Internet Explorer, Select Tools (Gear), Internet Options

Select Content (tab), Certificates (button)

Intermediate Certification Authorities (tab) scroll down the Issued To (column) to the letters DOD to verify you have:

DOD EMAIL CA-33 through DOD EMAIL CA-34

DOD EMAIL CA-39 through DOD EMAIL CA-44

DOD EMAIL CA-49 through DOD EMAIL CA-52

DOD EMAIL CA-59

DOD ID CA-33 through DOD ID CA-34

DOD ID CA-39 through DOD ID CA-44

DOD ID CA-49 through DOD ID CA-52

DOD ID CA-59

DOD ID SW CA-35 through DOD ID SW CA-38

DOD ID SW CA-45 through DOD ID SW CA-48

DOD SW CA-53 through DOD SW CA-58

and

DOD SW CA-60 through DOD SW CA-61

Please verify the Root certificates installed (sometimes the Antivirus program doesn't allow these to be installed)

Open the Trusted Root Certification Authorities (tab) verify you have:

DoD Root CA 2 through DoD Root CA 5

If you see 'There is a problem with this website's security certificate' after installing the DoD InstallRoot file or the Red Certificate error below, follow this guide

PROCEED TO STEP 4 - INSTALL ACTIVCLIENT

The Cross Cert Remover tool is 'supposed' to be an automated way of removing some certificates that cause access problems. From what I've experienced, you still need to follow my guide [slides 16&17] and manually remove certificates the Cross Cert Removal Tool fails to remove. Feel free to use if you want to waste your time.

You can install both the InstallRoot and the Cross Cert Removal tool in one single file which was created by NETCOM (Army Network Enterprise Technology COMmand)

This file is created for Home Users ONLY, you can download it from:

Information:

A certificate is a digital document providing the identity of a Web site or individuals. DoD Web sites use a certificate to identify themselves to their users and to enable secure connections. If you are receiving a warning that a site is untrusted / insecure, you will need to install the 'DoD Certificates.' In order to access sites enabled with a DoD PKI certificate without being prompted to accept the DoD Certificate chain at each log on [like Firefox and Safari do], people using Internet Explorer and Chrome should install the DoD certificates. These are separate from the personal certificates that are on your CAC, but they are related.

Root Certificates

How can you (or your web server) trust the identity of someone over the network? An infrastructure of trusted third parties has been put in place to distribute trust between end-users. This infrastructure verifies that we are who we say we are. If we trust the DoD PKI infrastructure, then the infrastructure can vouch for us to trust others that have certificates issued from the DoD PKI.

Click to see larger image

.

The DoD PKI Infrastructure is comprised of two Root Certification Authorities and a number of Intermediate Authorities. If all of the DoD root certificates are not installed on your computer, various applications will not be able to trust all DoD PKI certificates.

Click to see larger image

.

More information about this image can be found here: https://iase.disa.mil/pki-pke/interoperability/Pages/index.aspx

When it comes to using any CAC reader from home, it isn’t just plug and play. You’re going to need a couple extra things to get started such as Drivers and ActivClient.

And while you may be familiar with what drivers are, ActivClient may be relatively new to you. So let’s discuss what ActivClient is and where to obtain the proper version for your CAC.

What is ActivClient?

ActivClient is one of the most important pieces of the being able to use your CAC at home puzzle. It’s the actual software that allows your computer to communicate with the little computer chip embedded within the CAC itself.

The program was purposely designed with 4 major goals in mind.

1. Increase Security
2. Optimize Productivity
3. Improve Compliance
4. Reduce Costs

And for the most part, the program runs as designed. But if you’re using your CAC for DoD applications… Each branch has differences when installing ActivClient. (More info on that later.) And like most software, there are many different versions available.

It’s imperative that you’re running the appropriate version–which normally means you’re updated to the latest edition. However, it can often be difficult to determine exactly what version you need. If you’re unsure at all, don’t hesitate to ask your command or local PSD which one you need.

Where can I download the right version of ActivClient for my CAC?

Utilizing ActivClient properly is one of the biggest hangups when it comes to ensuring functional operation of your CAC reader. Normally, the hardware drivers are pretty simple. Most come with the CAC reader itself. But ActivClient is another story.

You’re going to need to independently install ActivClient to your computer.

But that’s OK. It’s not as difficult as you would believe–depending on your branch of service anyway. Here’s the best way each branch can get the right ActivClient software:

Navy

This includes Navy reservists. You’re going to need to contact your command’s IT personnel. Alternatively, you can outright purchase ActivClient 7.1 but… It’s so much simpler otherwise. Just remember, if you do purchase the software, ActivClient 7.1 works with Windows versions 7, 8, 8.1, 10.

Army

This includes Reservists and National Guard. You can easily access ActivClient through your AKO (Army Knowledge Online) portal. Just be sure you’re choosing the right program. There’s ActivClient 7.1 options for both 64-bit and 32-bit Windows.

Here’s the link for each:

64-bit: ActivClient AKO 64-bit

32-bit: ActivClient AKO 32-bit

NOTE: In order to best use these links, right click the link and select “Copy Link Address”. Then paste the URL above in your URL bar. This will prevent you from being directed to the AKO homepage.

Air Force

This includes Air Force reservists. You’d think that the Air Force would make this simple for you, however… not so much. The Air Force only has a convoluted download process for older Windows OS’s such as XP and Vista. The best route to take for this would be to purchase the software outright from a third party.

We recommend getting it from SCB Solutions. One download will provide you with the capabilities to install ActivClient on Windows 7, 8, or 10.

Marines

This includes reservists. Previously, the Marines had a download for the program on their MCNOSC… but they’ve since updated and removed the download. You’ll have to get this through an external purchase. Again, we recommend SCB Solutions. It’s super simple to get and will cover all your issues.

Coast Guard

This includes reservists. The Coast Guard currently has a download for ActivClient 6.1 on their portal. But this will only work for older OS’s such as XP and Vista. SO… just like the Marines and Air Force above, get it from SCB Solutions.

DOD Civilians

So as far as I know, there’s no portal for DoD Civvies where you can get ActivClient. Thankfully, you can buy the software from a third party vendor.