Step 3 - Using Remote Access For Windows | National Geospatial-Intelligence Agency Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

NGA Employee CAC Resources

Step 3 - Using Remote Access For Windows

Install Citrix Workspace/Receiver v4.12 (v14.12) or newer

1. From the Citrix website (, select Download Receiver for Windows.

2. When prompted, click Run. If only prompted with download, install the application after the saving the file.

3. Follow the on screen directions for the Citrix Receiver to complete the installation.

Verification of DoD Certificates installation - Internet Explorer

1. Open Internet Explorer.

2. Click Tools

3. Select Internet Options.

4. Within the Content tab, click Certificates.

5. Items to verify:

  • No Red X’s in front of any lines
  • At least 1 DoD Email
  • At least 1 DoD ID Certificate
  • They should expire on a future date
    • If any are expired, they will need to be deleted by selecting the certificate and click Remove.
    • If all are expired, a new CAC is required

Remote Access from Windows 10 using Internet Explorer (steps are similar for using Google Chrome, images may be different)

1.Insert your Common Access Card (CAC) into the reader and navigate to:

2. Select the Email Certificate to login to the website. NOTE: You may be prompted to enter your PIN multiple times.

3. Next, select the Desktop icon to launch the Citrix session. Please note that a file may appear at the bottom of your browser (similar to a downloaded file) that would need to be opened to access the remote session.

4. Once the Citrix session launches, you will be prompted to select a certificate again. This time select the *ID* certificate

  • If you receive the error message, “The smart card cannot perform the requested operation” or “The operation requires a different smart card”, select “OK” & repeat steps 4, 5, and 6.
  • When you are prompted which certificate to select, select “More Choices”. If two “ID” certificates display, select the second ID certificate.

5. To end your session, select "Disconnect"

Clearing Browser Cache:

Microsoft Internet Explorer

1. Open Internet Explorer.

2. Click Tools

3. Select Internet Options.

4. On the General tab, under Browsing History, select Settings.

5. Select View Files.

6. Select all file using Ctrl + A, and press Delete on your keyboard.

7. Close out the browser completely and then reopen.


Google Chrome

1. Open Chrome.

2. Select Menu.

3. Click More Tools.

4. Click Clear Browsing Data.

5. Change the Time range to clear to "All time" and checkmark all available boxes.

6. Select Clear Data.


Clearing Browser SSL State:

Microsoft Internet Explorer

1. Click "Tools".

2. Click the Content tab.

3. Click Clear SSL state, and then click OK.


Google Chrome

1. Click the Settings icon, and then click Settings.

2. Click Show advanced settings.

  • Under Network, click Change proxy settings. The Internet Properties dialog box appears.

3. Click the Content tab.

4. Click Clear SSL state, and then click OK.


Windows Shortcuts for Remote Access Windows

~ Win+D = Minimize all windows on the desktop

~ Alt+Tab = Change active window

~ Ctrl+Alt+Delete = via Ctrl+F1 and the Desktop Viewer toolbar

~ Alt+Shift+Tab ~ Windows+Tab

~ Windows+All Character keys Desktop

~ Win+D = Open desktop ~ Win+, = Peek at desktop


Recommended CAC reader hardware:

  • SCR3310v2.0
  • uTrust SmartFold SCR3500
  • OMNIKEY 312
  • OMNIKEY 3021
  • F1DN005U
  • F1DN008U

For detailed instructions, please refer to the Remote Access User Guide.

Remote User Guide

If you are having trouble with these steps, please email CSR (Operation Hours: 0600-1700 EST).

Email CSR