Fix CAC certificate errors and expired certs

Your CAC certificates are current and your computer trusts them again.

About 30 minNeed: CAC + readerNeed: InstallRootNeed: A computer you can install on

Walkthrough video in production

Real screen, real clicks, fake Soldier. Until it is up, the written steps below are the walkthrough.

Filmed on the live system with a CAC, every name and number swapped for a test Soldier before recording.

Step by step

01
Fix your computer first
Run InstallRoot again to reinstall the DoD certificates, then restart your browser. Do this after you get a new CAC or when a DoD site suddenly stops working.
02
Check your card's age
Look at the expiration date on your CAC. A CAC lasts at most 3 years.
03
Try the online update
Log in to DMDC's RAPIDS Self Service with your CAC, choosing the email certificate. Choose 'Activate PIV Certificate', step through the screens, and click 'Update CAC'.
If a 'Java Update Needed' message pops up, click 'Later'.
04
If it errors, reload
Some users got past errors by reloading the page and continuing.
05
If it still fails, book RAPIDS
Book a RAPIDS appointment in ID Card Office Online with 'Certificate Error' as the reason. Some sites only do certificate updates in person.
06
Reinstall certificates after
After any change to your card, run InstallRoot again and restart your browser.

! It is not clear today which cards the online update works for. If it fails, go to RAPIDS. Check with your unit admin.
! An expired card needs a RAPIDS visit.
! Cards issued after February 2018 already have the Authentication (PIV) certificate turned on.
! Picking the wrong certificate at login looks like a certificate problem. Choose 'Authentication'.