304304 CY BN Help Desk
CAC, ID card & logins

CAC, ID card & logins

Set up your CAC reader at home (Windows)

Your home Windows computer reads your CAC and logs you in to Army websites.

About 20 minNeed: CACNeed: USB CAC readerNeed: Windows PC you can install onNeed: Edge or Chrome

Walkthrough video in production

Real screen, real clicks, fake Soldier. Until it is up, the written steps below are the walkthrough.

  1. Script
  2. Voice
  3. Real-screen capture
  4. Published

Filmed on the live public site.

Step by step

  1. 01

    Get a reader

    Buy a USB CAC reader. They usually cost under $20.

  2. 02

    Plug it in

    Plug the reader into your computer and let Windows set it up. Put your CAC in the reader.

  3. 03

    Download InstallRoot

    Download InstallRoot 5.6 from DoD Cyber Exchange or MilitaryCAC. Install it with the default settings, then choose Run InstallRoot.

    Some antivirus programs block the certificate install.

  4. 04

    Install the DoD certificates

    Click 'Install Certificates' (the green down arrow). Click Yes on each security warning, usually 2 to 4 of them.

    If it fails, close it and choose 'Restart as Administrator'.

  5. 05

    Check that they installed

    Open Internet Options, then Content, then Certificates. Trusted Root should list DoD Root CA 3 through 6.

  6. 06

    Remove cross certificates

    Run the cross certificate remover from MilitaryCAC's home user tool. It often fails, so follow MilitaryCAC's guide to remove the rest by hand.

  7. 07

    Restart the browser and log in

    Close every browser window, then open Edge or Chrome and go to the site. When asked, pick the certificate labeled 'Authentication', not 'Email' or 'Signature'.

    Picking the wrong certificate is one of the most common login failures.

  8. 08

    Enter your PIN

    Type your 6 to 8 digit PIN.

    Three wrong tries in a row locks the card.

  9. 09

    On a Mac?

    Macs work differently. Follow MilitaryCAC's separate Mac page instead of these steps.

Why it gets kicked back

  • ! Choosing the 'Email' or 'Signature' certificate instead of 'Authentication'.
  • ! Missing or old DoD root certificates. Run InstallRoot again after you get a new CAC or when a DoD site stops working.
  • ! Antivirus blocking the certificate install.
  • ! Use Firefox only if it is already set up for CAC. Edge or Chrome is easier.
  • ! The Army help desk gives only limited help for personal Windows computers and none for personal Macs.

More in CAC, ID card & logins