Windows Users: To install DOD certificates on a Windows machine, you will need to download a software called InstallRoot. You can download the installer from https://nps.edu/web/technology/dod-certificates. Instructions for installation are also included at the link.

InstallRoot Tool

The InstallRoot application is the simplest and most straightforward way to install all DOD certificates in your windows operating system, and supports Internet Explorer, Chrome, Firefox, and Java. 

• • Select your corresponding computer architecture type from the links below:  (NIPR Windows Installer, for SIPR certificates access DISA's site directly from a SIPR machine) 
  • Once downloaded, install the file and run InstallRoot.
  • Install required certificates. A more detailed explanation with pictures is shown below.
  • Restart your browsers for the changes to take effect (all windows!).
    • In some cases you may have to clear the cache of the browser you are using.

Download the Install Root Software here:

Windows x64 bit

Windows x32 bit

Step 1:

Double-click the installer and click next.

Step 2:

Select the desired folder to install to or continue by clicking next.

Step 3:

Leave the defaults checked and click next.

Step 4:

After the installation finished click run InstallRoot.

Step 5*:

If Firefox, Java, or both programs are installed on your computer you will be asked if you would like to install the certificates in their respective certificate stores. Select yes if you are accessing DOD sites that use Java or if you access DOD sites with Firefox. 

Step 6:

Close the Quick Start pop up.

Step 7:

Click Install Certificates in the top left corner. If you click the drop down next to the red ribbon you should see a green check mark next to the certificates.

More information on certificates and other tools can be found via DISA: https://public.cyber.mil/pki-pke/tools-configuration-files/.

Download the latest DoD root certificates here: DoD RootCerts file. 

• How to install DOD certificates on a MacOS machine

1. Under "Additional Considerations" search for "PKCS# DoD"
2. Download and extract the latest certificates; e.g., "PKI CA Certificate Bundles: PKCS#7 for DoD PKI Only - Version 5.11"
3. Open the Keychain Access application if it's not already running.
4. Drag certificates in the folder to the login section of the Keychain Access.
   
5. Click 'Add' to pop-up adding all certificates to login keychain (must click add to every certificate.).
   
6. Once all certificates have been added double click DoD Root CA 3 and 4 certificates, select Trust and change 'When using this certificate' from 'User System Defaults' to 'Always Trust'.
   
7. Confirm your changes by entering an administrative password.
   
   

Notes:

There should be 55 DoD certs available in the Mac Keychain Access Utility. 

How to install DOD certificates on a MacOS machine:

You will need to download several certificate files and put them on MacOS' utility tool called Keychain. Please refer to the following instructions.

Download the latest DOD certificates for MacOS at this link: https://militarycac.com/macnotes.htm

1. Scroll down until you see five different links that look as follows: 

2. Click each of the five links to download all the DOD certificates.

3. Once downloaded, go to your Downloads folder from your Finder. Ensure that you keep the Downloads folder open. 

4. In the upper right of your screen, click on the icon that looks like a magnifying glass and type the keywords, "Keychain Access" to open the application. 

5. At the Keychain Access app, click the "System" located at the left side of the window. Ensure that you keep the Keychain Access app open.

6. Return to your open Downloads folder (Step 3) and drag the five files (.p7b and 4x .cer) to the "System" Keychain. 

7. The OS will ask for your administrator password or for your Touch ID (depending on what setting you have set). 

8. Click Add to all the five pop-ups, which will add the certs to the "System" Keychain. 

9. Once all the certs have been added, select the four DOD Root certs (they are indicated with a red circle and X marked), then double click on them to open four windows (one for each certificate). 

10. Click on the arrow on Trust to collapse the page and change "When using this certificate" from "User System Defaults" to "Always Trust." 

11. Close the window by clicking the red circle on the top left side of the window and the OS will ask for your administrator password or for your Touch ID to confirm the changes. 

12. Repeat steps 10 and 11 for the remaining DOD Root certs. Then close the Keychain completely.

13. Completely close any opened web browsers for the changes to take effect. Then reopen the web browser. 

MUST USE SAFARI WEB BROWSER—DOES NOT WORK ON iOS18+

1. Download the DoD Root CA 3 cert here: DoD Root CA 3.

2. Click Allow to download configuration profile.

3. Go to Settings > General > Profiles and Device Management and tap on DoD Root CA 3.

4. Tap Install and enter your passcode if asked.

5. Tap Install 2x to install certificate.

6. Tap Done on top right

7. Go back to Settings > General > About > Certificate Trust Settings.

8. Toggle on DoD Root CA 3 and click Continue.

Download DoD_Root_CA-6.cer certificate to connect to the Wi-Fi network for first time users in scenarios where our default Wi-Fi configuration does not work.