Step 1 - Setting up for ChomeBook and Chrome OS | National Geospatial-Intelligence Agency Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

NGA Employee CAC Resources

Step 1 - Setting up for ChomeBook and Chrome OS

Note: is a third party site that is not owned, operated, or managed by the Department of Defense nor the NGA. Content posted on does not necessarily represent those of the DoD or the NGA. Neither the NGA nor the DoD provides any warranty for any items hosted on"

To get started you will need:

  1. CAC
  2. Card reader
  3. Middleware (if necessary, depending on your operating system version)

General: Chrome OS owners have followed the two tutorials listed below and most have been successful to remote access SBU when they created a new Gmail account.

You can get started using your CAC by following these basic steps.

Step 1. Download the three Chrome OS apps that will be needed for SBU Remote Access:

  1. Citrix Workspace App (Version

  2. SmartCard Connector

  3. The next is a toss up as to which one works better, CSSI or CACKey but you need one.
    1. CSSI Smart Card Middleware
    2. CACKey can be downloaded from


Step 2. Install the DoD Certificates:

  1. Follow the instructions on site and download and install the DoD Certificates in descending order.
    NOTE: Download and Install the files in this order:
    • RootCert5.p7b
    • RootCert4.p7b
    • RootCert3.p7b
    • RootCert2.p7b
    • and finally, AllCerts.p7b
    by selecting each and clicking OPEN

  2. d. Be sure to select all three trust settings during the import. It is also a good idea to go back into ‘Manage Certificates’ setting and ensure that you have trusted every US Government Certificate by selecting ‘edit’ from the three dots corresponding the certificates.
An image depicting the
An image depicting the "Manage Certificates" screen within Chrome.


Recommended CAC reader hardware:

  • SCR3310v2.0
  • uTrust SmartFold SCR3500
  • OMNIKEY 312
  • OMNIKEY 3021
  • F1DN005U
  • F1DN008U

If you are having trouble with these steps, please contact the Enterprise Service Center.