Skip to main content
U.S. flag

An official website of the United States government

NGA Employee CAC Resources

Step 1 - Setting up for Windows

To get started you will need:

1. CAC
2. Card reader

You can get started using your CAC by following these basic steps:

1. Get a card reader.
If using an external Card Reader, NGA recommends the use of the SCR3310v2 card reader. These are available from the PITD office. In addition, please review the DoD CAC Reader Specifications  for more information regarding the requirements for a card reader.

2. Install DoD root certificates with InstallRoot (32-bit, 64-bit or Non Administrator).
In order for your machine to recognize your CAC certificates and DoD websites as trusted, run the InstallRoot utility (32-bit 64-bit  or Non Administrator ) to install the DoD CA certificates on Microsoft operating systems. The InstallRoot  User Guide is available here.

3. Make certificates available to your operating system and/or browser, if necessary.

For Internet Explorer 8.0 and above:

  1. Navigate to Tools > Internet Options > Content and click Certificates
  2. On the Personal tab review the list of certificates to determine if your CA certificates are in the list. The certificates on your CAC will be issued by a DoD CA.
  3. If the certificates appear in your list you are finished. If not please call the NGA Enterprise Service Center (800) 455-0899 Ext 755555

For Google Chrome:

  1. Click the three vertical dots in the upper right corner. Select Settings > Security and click Manage Certificates.
  2. On the Personal tab review the list of certificates to determine if your CA certificates are in the list. The certificates on your CAC will be issued by a DoD CA.
  3. If the certificates appear in your list you are finished. If not please call the NGA Enterprise Service Center (800) 455-0899 Ext 755555

Need Assistance?

If you are having trouble with these steps, please contact the Enterprise Service Center.