DOD Certificate Installation and Troubleshooting

IF YOU ARE A NEW USER.

Go through the certificate request process. Follow the procedure at the guide below.

https://eca.orc.com/client-certificates/#medium

When you get to step 4, complete the steps in this guide.

https://eca.orc.com/wp-content/uploads/ECA_Docs/Trusting_DoD_PKIs.pdf

Finally, you need to login. You can do so at the page below.

https://certificateenroll.orc.com/enroll/programs.html

Once here, follow the instructions in this guide to download your certificates.

https://eca.orc.com/wp-content/uploads/ECA_Docs/How_To_Import_Medium_Assurance_Certificates.pdf

MAKE SURE TO SAVE THE CERTIFICATE, IF YOU LOSE IT, YOU WILL NEED ANOTHER ONE.

I recommend saving the certificate to your onedrive in a folder called DOD. This is also where you can save the password for your certificate in a file here as well.

IF YOU ALREADY HAVE A CERTIFICATE

If you already have a certificate, but you need to install it again, start from here.

Check if you have Install Root
1. If so,
  1. Open it, enter the certificate password you set, and then hit Restart as Administrator on the top.
  2. Check that you have a checkmark next to Install DoD Certificates AND Install ECA Certificates Like So
2. If Not
  1. Download and install it from this website (you want 64-bit version installer)
  2. Follow the guide here - https://eca.orc.com/wp-content/uploads/ECA_Docs/Trusting_DoD_PKIs.pdf
Once installed, you now need to install each of the certificates.
START AT STEP 5 IN THIS GUIDE.
1. https://eca.orc.com/wp-content/uploads/ECA_Docs/How_To_Import_Medium_Assurance_Certificates.pdf
It is recommended that you use Firefox as your browser specifically, as the DOD certificate can cause issues with other sites. Follow these steps to complete this part of the installation.
https://eca.orc.com/wp-content/uploads/ECA_Docs/Firefox_Instructions/Import_BackUp_certs_Firefox.pdf
Once complete, visit this site to test if the installation worked. - https://eca.orc.com/certificate-test/
1. The page will take a moment to load, but if you get information about your certificate, then you are all set.
2. If not, check both installroot and your PEM certificates again.

NEVER SHARE THE ONEDRIVE FOLDER WITH ANYONE OUTSIDE (OR INSIDE) OF YANKEE LINE