How to add the DoD Root CA 2 to your computer’s Certificate Store

On rare occasions, running the DoD InstallRoot file does not install the DoD Root CA 2 certificate into the Trusted Root

Certification Authorities. This causes certificate errors when visiting DoD websites. This guide will show you how to fix the

error. NOTE: This is the only process known for Windows RT devices

to install the certificate

Last update / review: 15 February 2015

Presented by: Michael J. Danberry

Please check for the most current version of this presentation at: http://militarycac.com/files/dodrootca2.pdf

1

If you are using a Windows computer and see the below message when trying to access a DoD website [and have already installed the DoD InstallRoot file] Click: Continue to this website (not recommended)

Go to slide 5 to continue

2

After clicking Continue to this website (not recommended) you’ll see a red shield with a

white x in it, stating Certificate error

3

Go to the following web link: https://militarycac.com/certs/ and click on

DoDRoot2.cer

After you click on the link, you’ll see the message below, select Open

NOTE: If your computer will not let you select Open, Save it to your computer and double click it 4

Select Open

5

Select Install Certificate… then OK

6

Select Local Machine, then Next

Windows 7 users may not see this screen7

If prompted for the User Account Control, Select Yes

8

Select Place all certificates in the following store, then Browse…

9

Select Trusted Root Certification Authorities, thenOK

10

You should now see Trusted Root Certification Authorities in the box, select Next

11

Select Finish

12

Select OK

13

Select OK

14

Close your Web browser, Reopen it, and try revisiting the website you were receiving the

certificate error on previously. You should not have the error any longer

If the problem still persists, try running Internet Explorer as an admin, here’s how:

Start > Internet Explorer > Run As Administrator > Tools > Internet Options > Content > Certificates > Trusted Root Certification Authorities > Import > (select file) > Next > OK, and windows reports Import Successful.

More Information can be found here: http://superuser.com/questions/145394/windows-7-will-not-install-a-root-certificate

15

Presentation created and maintained by:Michael J. Danberry

https://MilitaryCAC.com

If you still have questions, visit: https://militarycac.com/questions.htm

16