Enable Smart Card Support in Chrome for CAC

Chrome is the default browser for many government computers, but getting it to work properly with your CAC requires specific configuration. Unlike Edge, which uses Windows’ built-in certificate store automatically, Chrome needs the DoD root certificates installed system-wide and sometimes additional tweaks to recognize your smart card.

Prerequisites

Before configuring Chrome for CAC access:

• Install DoD root certificates: Download and run InstallRoot from MilitaryCAC.com
• Connect your CAC reader: Ensure Windows recognizes the reader (check Device Manager)
• Insert your CAC: The card must be present before opening Chrome
• Verify middleware: ActivClient or your organization’s CAC middleware should be running

Step 1: Install DoD Root Certificates

Chrome uses the Windows certificate store, so certificates installed via InstallRoot should work automatically. However, verify they’re installed:

1. Press Windows + R, type certmgr.msc, press Enter
2. Expand “Trusted Root Certification Authorities” → “Certificates”
3. Look for certificates starting with “DoD Root CA”
4. You should see DoD Root CA 2, 3, 4, and 5

If these are missing, download and run InstallRoot again as Administrator.

Step 2: Clear Chrome’s Certificate Cache

If Chrome isn’t recognizing your CAC after installing certificates:

1. Close Chrome completely (check Task Manager to ensure no chrome.exe processes)
2. Press Windows + R, type %LOCALAPPDATA%GoogleChromeUser Data
3. Delete the “Certificate Revocation Lists” folder if present
4. Restart Chrome with your CAC inserted

Step 3: Check Chrome’s Security Settings

Navigate to Chrome’s certificate settings:

1. Open Chrome and go to chrome://settings/security
2. Click “Manage certificates”
3. This opens Windows Certificate Manager
4. Under “Personal,” you should see your CAC certificates listed

If your CAC certificates don’t appear:

• Remove and reinsert your CAC
• Restart Chrome
• Check that your CAC middleware is running

Step 4: Test CAC Authentication

Try accessing a CAC-required site:

1. Navigate to milConnect or your service portal
2. Chrome should prompt you to select a certificate
3. Choose your DoD ID certificate (not EMAIL)
4. Enter your CAC PIN when prompted

Common Chrome CAC Issues

“Your connection is not private” Error

This usually means DoD root certificates aren’t installed or are outdated:

• Run InstallRoot again
• Clear Chrome’s browsing data (Ctrl+Shift+Delete)
• Restart Chrome

No Certificate Prompt Appears

• Ensure CAC is inserted before navigating to the site
• Check that the Smart Card service is running (services.msc)
• Try a different CAC reader or USB port
• Restart Chrome with your CAC already inserted

“NET::ERR_CERT_AUTHORITY_INVALID”

The site’s certificate chain isn’t trusted:

• Install intermediate DoD certificates (included in InstallRoot)
• Check if the site’s certificate has expired
• Contact your IT department if the error persists—it may be a server-side issue

Chrome Keeps Asking for Certificate Selection

Chrome prompts for certificate selection on every request by default. To reduce prompts:

1. Go to chrome://settings/content/protectedContent
2. Enable “Allow identifiers for protected content”

Note: Some sites will always require certificate selection for security purposes.

Chrome vs Edge for CAC

Both browsers work, but there are differences:

If Chrome gives you persistent problems, try Edge—it’s based on the same Chromium engine but integrates more tightly with Windows security features.

Enterprise Policy Considerations

On government computers, Chrome may be configured via group policy. If settings appear locked:

• You may not be able to modify certificate settings
• Contact your IT department for CAC configuration assistance
• Check if an alternative browser is approved for CAC use

Quick Troubleshooting Checklist

1. [ ] DoD root certificates installed (run InstallRoot)
2. [ ] CAC inserted before opening Chrome
3. [ ] Smart Card service running
4. [ ] CAC middleware (ActivClient) running
5. [ ] CAC appears in certmgr.msc under Personal
6. [ ] Chrome restarted after certificate installation

Most Chrome CAC issues stem from missing DoD root certificates or timing—always insert your CAC before opening the browser.

Last updated: December 2025

About Jack Ashford

Jack Ashford is a DoD cybersecurity specialist with over 12 years supporting military IT infrastructure. He holds Security+ and CAC certifications and has worked as systems administrator for multiple DoD agencies. Jack specializes in PKI certificate management, CAC troubleshooting, and secure authentication systems, helping military personnel and contractors resolve access issues quickly.