Getting your Common Access Card (CAC) working with Chrome on Windows or Mac requires proper certificate configuration. This guide walks you through the complete setup process to access DoD websites securely.
Prerequisites
Before configuring Chrome for CAC access, ensure you have:
- A CAC reader connected to your computer (USB readers like SCR3310 or built-in keyboard readers)
- Current DoD certificates installed (available from militarycac.com)
- ActivClient or similar middleware installed and running
- Your CAC card with valid certificates
Installing DoD Root Certificates
Chrome uses your operating system’s certificate store, so you’ll need to install DoD certificates at the system level:
Windows Users
- Download the DoD certificate bundle from militarycac.com
- Double-click the InstallRoot file to run the installer
- Allow administrator permissions when prompted
- Restart Chrome after installation completes
Mac Users
- Download the Mac-specific certificate bundle
- Open Keychain Access from Applications > Utilities
- Drag the certificate files into the System keychain
- Mark each certificate as “Always Trust”
Configuring Chrome Settings
After installing certificates, configure Chrome to recognize your CAC:
- Open Chrome and navigate to chrome://settings/certificates
- Click “Manage Certificates” to open your system certificate manager
- Verify DoD certificates appear in the Trusted Root Certification Authorities
- Insert your CAC and confirm Chrome can see your personal certificates
Testing Your Configuration
Visit a DoD CAC-enabled website like OWA (Outlook Web Access) or MyPay to test your setup. When prompted, select your CAC certificate and enter your PIN. If authentication succeeds, your configuration is complete.
Common Issues
Certificate not found: Ensure your CAC reader is properly connected and middleware is running. Try removing and reinserting your card.
SSL errors: You may need to clear Chrome’s SSL state. Go to chrome://net-internals/#hsts and clear site security policies, then restart the browser.
PIN prompt doesn’t appear: Check that ActivClient or your middleware software is running in the system tray. Restart the service if needed.
