Step 1 - Instructions for New Card | National Geospatial-Intelligence Agency Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

NGA Employee CAC Resources

Step 1 - How to Present the PIV Authentication Certificate to DoD Websites

The CAC has three certificates that are of interest:

  • ID Certificate – identifier is10 digits long
  • PIV Authentication Certificate – identifier is 16 digits long
  • Email Signing Certificate – identifier is10 digits long

You will select either 2 or 3 based upon the specific website.

For Windows Internet Explorer or Edge:

1. Enter the website address into the address bar. The following pop up should appear:

Selecting a certificate.
Selecting a certificate.

2. Select “More choices”, the following dialog should appear:

More choices menu when selecting a certificate.
More choices menu when selecting a certificate.

3. After selecting a cert the last step is entering your PIN:

Entering a CAC PIN.
Entering a CAC PIN.

For Firefox (Not recommended for use):

1. Open Firefox and open the Menu (3 vertical lines in the top right corner). Select Options.

Accessing the Firefox settings menu.
Accessing the Firefox settings menu.

2. Select Privacy and Security. Scroll to the bottom of the page.

Changing Firefox Certificates settings.
Changing Firefox Certificates settings.

3. Select “Ask you every time”. There is no need to save, close the Options tab.

4. Enter the website address into the address bar. The following pop up should appear, enter your PIN:

Entering the master password in Firefox.
Entering the master password in Firefox.

5. The following popup should then appear: (Drop Down Menu for Cert Selection, 6 digit serial number [12:XY:34])

The User Identification Request popup.
The User Identification Request popup.

6. This screen should be familiar to most Thin Client users. Here is how to identify the correct cert from the drop down menu. For future ease of use or to use Chrome, look at the 6 digit serial number between the brackets: [12:XY:34] in this example.

An example of the email certificate.
An example of the email certificate.
An example of the ID certificate.
An example of the ID certificate.
An example of the PIV Auth certificate.
An example of the PIV Auth certificate.

For Chrome:

1. You will need to determine the 6 digit serial number associated with your certificates by using step 6 above.

2. Enter the website address into the address bar. The following popup should appear, select the correct certificate:

An example of the certificate selection pop-up in Chrome.
An example of the certificate selection pop-up in Chrome.

Support

Recommended CAC reader hardware:

  • SCR3310v2.0
  • uTrust SmartFold SCR3500
  • OMNIKEY 312
  • OMNIKEY 3021
  • F1DN005U
  • F1DN008U

If you are having trouble with these steps, please email CSR (Operation Hours: 0600-1700 EST).

Email CSR