As long as you have the correct DOD Root CA certs installed, trusted, and don't have any duplicates, the rest of the various DOD certs shouldn't show any issues of validation in your Keychain. A root certificate is the top-most certificate of the tree, which means all other certificates further down the tree depend on the trustworthiness of the root. Of the various DOD certs, the most important will be the DOD Root certs. When you're installing the various DOD certificates into the Keychain, you're essentially telling the Mac OS how it should handle the certificate and any certificates issued by that server. The Mac OS relies heavily on the information you put in the Keychain. Dod Root Certificates For Mac NOTE: If you wish to start with a Keychain free of any dod certificates, search your login and system keychains for any DOD Root, DOD ID, DOD ID SW, and DOD EMAIL certificates, then delete them.

If you are using Firefox, you’ll need to do some extra steps. If you are using Chrome or Safari, then follow step 3a below. Now that you have your CAC reader connected and accepted on your Mac computer, it’s time to ensure you have the right certificates in order to access DOD CAC required web pages.

Re: Fed-Talk Root Cert on MacBookPro Question - Apple. OPTION 2 - Download and install the DOD Root Certificates (Windows, Mac, Linux) By importing and trusting the root DOD certificates (4 of them) you will be able to use any. DoD Class 3 PKI Download Root CA Certificate Trusting the DOD SSL Certificates - Welcome to the NPS Wiki - NPS. Once you trust the four DoD Root CA certificates, the icons should now be white + in a light blue circle. Before changing When using this certificate: After changing When using this certificate: Close the windows and provide authentication, either password or fingerprint if you have that configured. Only do this for the DoD Root CA certificates.

Dod root certificates mac