Military Smart Cards
Windows Setup

CAC Setup for Windows

Complete installation guide for Windows 10 and Windows 11 systems.

1
Connect Your CAC Reader

Connect your USB smart card reader to an available USB port. Windows should automatically detect and install basic drivers.

Verify Reader Detection:

  1. Open Device Manager (Win + X, then select Device Manager)
  2. Look for "Smart card readers" category
  3. Your reader should be listed without any warning icons
2
Install DoD Certificates

Download and install the latest DoD PKI root certificates from the official DoD Cyber Exchange.

Installation Steps:

  1. Download "InstallRoot" certificate bundle (ZIP file)
  2. Extract the contents to a folder on your desktop
  3. Right-click on "InstallRoot.exe" and select "Run as administrator"
  4. Follow the prompts to install all certificates
  5. Restart your computer when installation completes
3
Install Middleware (Optional)

Windows 10/11 includes built-in smart card support, so middleware is often optional. However, some users prefer additional software for enhanced functionality.

Option 1: Use Windows Built-in Support (Recommended)

Windows 10 and 11 have native smart card support. After installing DoD certificates, your CAC should work with Chrome and Edge without additional software.

Option 2: Install ActivClient

ActivClient is commercial middleware that provides additional features and troubleshooting tools. It's commonly used on government computers.

Note: ActivClient may require a license for personal use. Check with your organization.

Option 3: Install OpenSC (Free)

OpenSC is free, open-source middleware that works well on Windows.

Download OpenSC
4
Configure Browsers

Chrome & Edge (Chromium)

These browsers automatically use Windows certificate store. No additional configuration needed after certificate installation.

Firefox

Firefox requires manual configuration:

  1. Open Firefox and go to Settings
  2. Navigate to Privacy & Security → Security → Security Devices
  3. Click "Load" to add a new module
  4. Module Name: OpenSC PKCS#11
  5. Module Path: C:\Program Files\OpenSC Project\OpenSC\pkcs11\opensc-pkcs11.dll
  6. Click OK and restart Firefox
5
Test Your Setup
  1. 1. Insert your CAC into the reader (chip side up)
  2. 2. Open Chrome or Edge
  3. 3. Navigate to a CAC-enabled test site (e.g., my.af.mil or milconnect)
  4. 4. You should be prompted to select a certificate and enter your PIN
  5. 5. Select your authentication certificate and enter your PIN
Having Issues?View FAQs