InstallRoot installs the DoD Root certificates into Microsoft products.  Note: Home users "should not" need administrative rights to run this program.  Sometimes you may have to save the file to your computer, then right click it and click Run as Administrator.  Government owned computers may require admin rights.

If the website you are visiting is prompting you that the site is not trusted, or your DoD website worked up until recently and doesn't now, you need to update your DoD certificates.

 Apple computers DO NOT NEED this file

DOD InstallRoot 3.15a was issued on 16 September 2011

Download InstallRoot 3.15a from MilitaryCAC

(or from .mil links below)

If you receive the message "Windows has found a problem with this file.  Name InstallRoot_v3.15A.exe and publisher:  Unknown Publisher."  then

Download this zip file and run the InstallRoot_v3.15A.exe file inside it.  (This is very common when using Internet Explorer 9).

InstallRoot Installation Instructions:

Select Run when prompted to Run or Save the file, you will see a black DOS screen show on your screen, and have words scrolling in it.  When it goes away, you have just installed the DoD certificates on your computer.

NOTE:  Windows Vista & 7 may show a message that the file might not have installed correctly.  Select "This program installed correctly."

PROCEED TO STEP 4 - INSTALL ACTIVCLIENT

Alternate download links for the DoD certificates:

https://www.us.army.mil/suite/doc/33412074

Your Internet Explorer may prompt you with a banner stating it blocked this site from downloading files to your computer.  Click the box for the option to Download File.  Nothing will happen, now go back and click the link again above.  Now it will give you the option to Run, Save, or Cancel.

-or-

The DoD PKE (Public Key Enablement) website

http://iase.disa.mil/pki-pke/function_pages/tools.html

Click on: InstallRoot 3.15 A, then click on (ZIP Download) Size: 240KB.  Save it to your computer, then double click the folder titled:  unclass_installroot_v3.15a.zip, open: InstallRoot_v3.15A, Windows, then run InstallRoot_v3.15A.exe.  Now you have the same file as above.

-or-

Navy Information Assurance website

https://infosec.nmci.navy.mil/PKI/installroot_v3.15a.exe (Requires CAC)

Select Run when prompted to Run or Save the file, you will see a black DOS screen show on your screen, and have words scrolling in it.  When it goes away, you have just installed the DoD certificates on your computer.

NOTE:  Windows Vista & 7 may show a message that the file might not have installed correctly.  Select "This program installed correctly."

-or-

STILL VERSION 3.13A: The DoD PKE public site:  https://www.dodpke.com/InstallRoot/ has the DoD Certificates.

Right click, Save target as on the InstallRoot 3.13A.zip file to a location of your choice.  Once it is downloaded, go to the location you just downloaded it to.  Right click the zip file and select Extract all.  Pay close attention to where it wants to save the file to, it will create a folder where it will extract the files into.  NOW double click  InstallRoot_v3.13A.exe file.  It will be the one that is 313KB in size and file type will be Application.

Information:

A certificate is a digital document providing the identity of a Web site or individuals.  DoD Web sites use a certificate to identify themselves to their users and to enable secure connections.  If you are receiving a warning that a site is untrusted / insecure, you will need to install the "DoD Certificates."  In order to access sites enabled with a DoD PKI certificate without being prompted to accept the DoD Certificate chain at each log on [like Firefox and Safari do], people using Internet Explorer and Chrome should install the certificates.  These are separate from the personal certificates that are on the CAC itself.

Root Certificates (Information received from https://infosec.nmci.navy.mil/PKI/pki_tip.html )

How can you (or your webserver) trust the identity of someone over the network?  An infrastructure of trusted third parties has been put in place to distribute trust between end-users.  This infrastructure verifies that we are who we say we are.  If we trust the DoD PKI infrastructure, then the infrastructure can vouch for us to trust others that have certificates issued from the DoD PKI.

Click to see full size image

The DoD PKI Infrastructure is comprised of two Root Certification Authorities and a number of Intermediate Authorities.  If all of the DoD root certificates are not installed on your computer, various applications will not be able to trust all DoD PKI certificates.

If you have questions or suggestions for this site, contact Michael J. Danberry

Last Update or Review:  Saturday, 31 December 2011 21:28 hrs

The following domain names all resolve to the same website:  ChiefsCACSite.com, CommonAccessCard.us, CommonAccessCard.info, ChiefGeek.us, MilitaryCAC.info, MilitaryCAC.us, MilitaryCAC.org, MilitaryCAC.net, & MilitaryCAC.mobi