InstallRoot installs the DoD Root certificates into Microsoft products.

If the website you are visiting is prompting you that the site is not trusted, you have received a new CAC, or your DoD website worked up until recently and doesn't now, you need to update your DoD certificates.

 Apple computers DON'T USE this file

DOD InstallRoot 3.15a was issued on 16 September 2011

Download InstallRoot 3.15a from MilitaryCAC

(or from .mil links below)

If you receive the message "Windows has found a problem with this file.  Name InstallRoot_v3.15A.exe and publisher:  Unknown Publisher."  then

Download this zip file and run the InstallRoot_v3.15A.exe file inside it.  (This is very common when using Internet Explorer 9).

InstallRoot Installation Instructions:

Select Run when prompted to Run or Save the file, you will see a black DOS screen show on your screen, and have words scrolling in it.  When it goes away, you have just installed the DoD certificates on your computer.

NOTE:  Windows Vista, 7, & 8 may show a message that the file might not have installed correctly.  Select "This program installed correctly."

PROCEED TO STEP 4 - INSTALL ACTIVCLIENT

Alternate download links for the DoD certificates:

https://www.us.army.mil/suite/doc/33412074

Your Internet Explorer may prompt you with a banner stating it blocked this site from downloading files to your computer.  Click the box for the option to Download File.  Nothing will happen, now go back and click the link again above.  Now it will give you the option to Run, Save, or Cancel.

-or-

DISA's IASE PKI and PKE Tools website

http://iase.disa.mil/pki-pke/function_pages/tools.html

Click on: InstallRoot 3.15 A, then click on (ZIP Download) Size: 240KB.  Save it to your computer, then double click the folder titled:  unclass_installroot_v3.15a.zip, open: InstallRoot_v3.15A, Windows, then run InstallRoot_v3.15A.exe.  Now you have the same file as above. (only with a lot more steps)

-or-

Navy Information Assurance website

https://infosec.nmci.navy.mil/PKI/installroot_v3.15a.exe (Requires CAC)

Select Run when prompted to Run or Save the file, you will see a black DOS screen show on your screen, and have words scrolling in it.  When it goes away, you have just installed the DoD certificates on your computer.

NOTE:  Windows Vista & 7 may show a message that the file might not have installed correctly.  Select "This program installed correctly."

Information:

A certificate is a digital document providing the identity of a Web site or individuals.  DoD Web sites use a certificate to identify themselves to their users and to enable secure connections.  If you are receiving a warning that a site is untrusted / insecure, you will need to install the "DoD Certificates."  In order to access sites enabled with a DoD PKI certificate without being prompted to accept the DoD Certificate chain at each log on [like Firefox and Safari do], people using Internet Explorer and Chrome should install the certificates.  These are separate from the personal certificates that are on the CAC itself.

Root Certificates (Information received from https://infosec.nmci.navy.mil/PKI/pki_tip.html )

How can you (or your webserver) trust the identity of someone over the network?  An infrastructure of trusted third parties has been put in place to distribute trust between end-users.  This infrastructure verifies that we are who we say we are.  If we trust the DoD PKI infrastructure, then the infrastructure can vouch for us to trust others that have certificates issued from the DoD PKI.

Click to see full size image

The DoD PKI Infrastructure is comprised of two Root Certification Authorities and a number of Intermediate Authorities.  If all of the DoD root certificates are not installed on your computer, various applications will not be able to trust all DoD PKI certificates.

If you have questions or suggestions for this site, contact Michael J. Danberry

Last Update or Review:  Sunday, 19 February 2012 16:50 hrs

The following domain names all resolve to the same website:  ChiefsCACSite.com, CommonAccessCard.us, CommonAccessCard.info, ChiefGeek.us, MilitaryCAC.info, MilitaryCAC.us, MilitaryCAC.org, MilitaryCAC.net, & MilitaryCAC.mobi