Skip to main content
U.S. flag

An official website of the United States government

NGA Employee CAC Resources

Step 1 - Setting up for ChomeBook and Chrome OS

Note: Militarycac.com is a third party site that is not owned, operated, or managed by the Department of Defense nor the NGA. Content posted on militarycac.com does not necessarily represent those of the DoD or the NGA. Neither the NGA nor the DoD provides any warranty for any items hosted on militarycac.com."

To get started you will need:

  1. CAC
  2. Card reader
  3. Middleware (if necessary, depending on your operating system version)

General: Chrome OS owners have followed the two tutorials listed below and most have been successful to remote access SBU when they created a new Gmail account.

You can get started using your CAC by following these basic steps.

Step 1. Download the three Chrome OS apps that will be needed for SBU Remote Access:

  1. Citrix Workspace App (Version 20.4.0.49):
    https://chrome.google.com/webstore/detail/citrix-workspace/haiffjcadagjlijoggckpgfnoeiflnem?hl=en 

  2. SmartCard Connector
    https://chrome.google.com/webstore/detail/smart-card-connector/khpfeaanjngmcnplbdlpegiifgpfgdco 

  3. The next is a toss up as to which one works better, CSSI or CACKey but you need one.
    1. CSSI Smart Card Middleware
      https://chrome.google.com/webstore/detail/cssi-smart-card-middlewar/haeblkpifdemlfnkogkipmghfcbonief?hl=en 
    2. CACKey can be downloaded from
      https://chrome.google.com/webstore/detail/cackey/lpimdiknnpijeigckalekdccibdmeojg?hl=en-US 

 

Step 2. Install the DoD Certificates:

  1. Follow the instructions on https://militarycac.com/chromebook.htm  site and download and install the DoD Certificates in descending order.
    NOTE: Download and Install the files in this order:
    • RootCert5.p7b
    • RootCert4.p7b
    • RootCert3.p7b
    • RootCert2.p7b
    • and finally, AllCerts.p7b
    by selecting each and clicking OPEN

  2. d. Be sure to select all three trust settings during the import. It is also a good idea to go back into ‘Manage Certificates’ setting and ensure that you have trusted every US Government Certificate by selecting ‘edit’ from the three dots corresponding the certificates.

Support

Recommended CAC reader hardware:

  • SCR3310v2.0
  • uTrust SmartFold SCR3500
  • OMNIKEY 312
  • OMNIKEY 3021
  • F1DN005U
  • F1DN008U

Need Assistance?

If you are having trouble with these steps, please contact the Enterprise Service Center.