How can I access CAC-required sites such as Enterprise Email and the AKO/DKO portal from home?
Making your home computer ready to log in to Enterprise Email, the AKO/DKO portal, or any other CAC-required sites is easy. If you have a newer Windows-based computer and a newer Common Access Card it might be as easy as just plugging in the CAC reader! As the Common Access Card has had evolving standards there may be differences based on your specific computer and CAC so follow this checklist to make your home computer CAC ready.
Obtain a CAC Reader / Install Drivers
Many times your local IT support staff will have spare CAC readers available to loan or issue. You may need to do nothing more than ask your local support staff in order to obtain a CAC reader for home use.
If you find that you need to purchase a CAC reader there are many different types. The most common CAC readers are either a part of a keyboard or an external USB device. You can also obtain CAC readers that plug directly into your laptop.
The most common models of USB CAC readers are SCM Microsystem’s SCR-3310 and SCR-331 and the most common CAC-ready keyboards are Dell’s SK3205 or HP’s ED707AA. Searching for these model numbers online should return places to purchase these devices at.
First and formost you will need a CAC Reader. We recommend this one.
Under typical conditions your new CAC reader should install automatically. If it still does not work after installing then you might need to update the firmware (software that is stored on the device itself).
Install the DoD Root Certificates
The trusting of sites over the internet is validated through an independently trusted third party so that the trusting is automatic and transparent to most people. As AKO and most other military sites end with a .mil instead of a .com there is no independent third party trusting authority. By downloading and installing the “DoD Root Certificates” you enable your computer to automatically trust sites in the DoD network such as AKO. This will remove the warning you might see as you browse to AKO saying that it is “untrusted.”
You will need to install the DoD Root Certificates on a Windows machine in order to use your CAC. Download the DoD Root Certificate. You can also obtain the DoD root certificate on AKO at https://www.us.army.mil/suite/doc/33412023
If you receive an error that says the “program did not install correctly,” simply click, “this program installed correctly.”
**Note** Apple systems do not need the DoD Root Certificates.
ActivClient is the software package that allows your CAC to communicate with the sites you need to access. Depending on your CAC and the Operating System you use you may not need this software.
Identify your CAC type.
Take your physical CAC and look on the back of the card above the magnetic strip; the type of CAC your card is will be listed here. If your card is a “Gemalto TOP DL GX4 144” or “Oberthur ID One 128 v5.5 Dual” your CAC is one of the required new models. If your card says something other than this you require the ActivClient software.
Identify your OS
|Windows 8 users with a new CAC type can just plug in and install their CAC reader and access Enterprise Email and AKO without the need for ActivClient|
Windows 7 users whose new CAC type is a “Gemalto TOP DL GX4 144” can also use their CAC and CAC reader without the need for ActivClient.
All other Windows users must download ActivClient to make their computer CAC ready.
64-bit users of Windows 7 or Windows Vista can download ActivClient from AKO at this link: https://www.us.army.mil/suite/folder/21154526
32-bit users of Windows 7, Windows Vista, or Windows XP can download ActivClient at this link: https://www.us.army.mil/suite/folder/21154519
Windows 7 users whose new CAC type is an “Oberthur ID One 128 v5.5 Dual” need to first install ActivClient at the appropriate link above and then apply one of the following fixes; https://www.us.army.mil/suite/doc/29961522 (32bit) or https://www.us.army.mil/suite/doc/29961523 (64bit).
If you have obtained a CAC reader, installed the DoD root certificates, and properly installed ActivClient and you are still having issues accessing Enterprise Email or the AKO/DKO portal you may need to adjust, correct, or set some settings of your internet browser.
CAC for Macintosh Home Use
Unfortunately the AKO/DKO service desk is unable to provide any direct assistance with a Macintosh system.