How to add the DoD Root CA 2, 3, 4, & 5 certificates in your

How to add the DoD Root CA

2, 3, 4, & 5 certificates in your

Windows computer Certificate

Store

Sometimes running the DoD InstallRoot file does not install the

DoD Root CA 2, 3, 4, & 5 certificates into the Trusted Root

Certification Authorities tab. This causes certificate errors when

visiting DoD websites. This guide will show you how to fix the

error.

NOTE: This is the only process known for Windows RT devices

to install the certificate, but will work for all versions of

Windows

Last update / review: 03 January 2019

Presented by: Michael J. Danberry

Please check for the most current version of this presentation at:

http://militarycac.com/files/dodrootca2.pdf

If you are using a Windows computer and see the

below message when trying to access a DoD website

[and have already installed the DoD InstallRoot file]

Click: Continue to this website (not recommended)

Go to slide 5 to continue

After clicking Continue to this website (not

recommended) you’ll see the entire web

address bar is red, and a red shield with a

white x in it, stating Certificate error

Go to the following web page:

https://militarycac.com/certs/ and click on

DoDRoot2.cer, DoDRoot3.cer, DoDRoot4.cer, &

DodRoot5.cer

After you click each link,

you’ll see the message

below, select Save As. Save

all four to your desktop.

You can also Right click the

link and save target as

Right click each certificate, select Install Certificate,

then select Open

Select Install Certificate… then OK

Select Local Machine, then Next

Windows 7 users may not see this screen

NOTE: If you

are unable to

select Local

Machine, go to

slide 16 and

instructions for

installing this

certificate.

When / If prompted for the User Account Control,

Select Yes

Select Place all certificates in the following store,

then Browse…

Select Trusted Root Certification Authorities, then

Trusted Root Certification Authorities should now

show in the box, select Next

Select Finish

Select OK

If you only installed one of the 4 certificates, Go

back to slide 5 and do the same for the

DoDCert3.cer, DoDCert4.cer, & DoDCert5.cer files

and follow the guide for each certificate

Close your Web browser, Reopen it, and try

revisiting the website you were receiving the

certificate error on previously. You should not have

the error or red background any longer

NOTE: If the problem still persists, try running Internet Explorer as an admin, here’s

how:

Right click Internet Explorer, select Run As Administrator, click Tools, Internet Options,

Content (tab), Certificates (button), Trusted Root Certification Authorities (tab), Import

(button) (select file), Next, OK, and windows reports Import Successful.

More Information can be found here:

http://superuser.com/questions/145394/windows-7-will-not-install-a-root-certificate

NOTE2: If you still have problems go to slide 17 and follow instructions as the file may

not have installed.

Sometimes your AntiVirus / Security program

can block the certificate from installing

Temporarily disable the Security program and attempt to install the

InstallRoot file again from https://militarycac.com/dodcerts.htm

If you are still receiving the certificate error, it

is possible the file did not install correctly.

This time follow slides 5-11 again. Select the box titled: Show physical

stores, then reopen Trusted Root Certification Authorities and select

Registry, then OK

Registry

You’ll know they are installed when you see: DoD

Root CA2, DoD Root CA 3, DoD Root CA 4, & DoD

Root CA 5 in both the Issued To and Issued By

columns under the Trusted Root Certification

Authorities tab

Presentation created and maintained by:

Michael J. Danberry

https://MilitaryCAC.com

If you still have questions, visit:

https://militarycac.com/questions.htm