NOTE:  These instructions are provided as general guidance for home use only.  If these instructions do not work on your system, visit the ActivClient page for Army users, or the following link for other military branches to find links to obtain a copy of ActivClient.  Windows 7 (& 8) requires ActivClient version 6.2.  If you have the Oberthur ID One 128 v5.5 Dual CAC, you'll also need to update ActivClient 6.2 (unless you are using Windows 7 Professional or Ultimate).

The firmware update "should" fix the following problems:

A.  Card reader is not recognized

B.  Shows up as "STCII Smart Card Reader"

C.  Shows up as "USB Smart Card Reader" (however, this is not always a problem)

D.  Does not read your new "Gemalto TOP DL GX4 144" or "Oberthur ID One 128 v5.5 Dual" CAC.

E.  Using your CAC with Windows 7 (& 8) without ActivClient

Installation Instructions

    a. Install a CAC reader on your Windows 7 (& 8) computer.  Verify the card reader is properly installed by checking that a reader is listed in the Device Manager under "Smart card readers".  The Device Manager can be accessed by opening the Start menu, right-clicking Computer {which may be listed as a computer name}, and selecting: Properties, then Device Manager

Insert your CAC into the reader.  Verify the card reader is successfully recognizing the CAC by checking that an "Identity Device" is listed in the Device Manager under "Smart cards" as shown below.  If it is, your CAC may be PIV-II compliant.

If your CAC is not PIV-II-compliant, the smart card may or may not show up under "Other devices" as shown below:

     b. Open Internet Explorer (IE).  If you think your CAC is PIV-II compliant, go into IE, select Tools, Internet Options, Content (tab), Certificates (button).  The Personal Tab should open by default.  If your CAC is PIV-II-compliant, you should see 3 certificates issued to you by DoD as shown below:  (Unless you had ActivClient already installed recently, they will show up as well)

Two of these certificates (the ones that have "EMAIL" in the "Issued By" field) are your standard DoD E-mail Signature and Encryption certificates.  The third certificate is your PIV Identity certificate.  This PIV Identity certificate is a different certificate than the DoD Identity certificate you normally see when using ActivClient.  This should not impact your use on your personal computer.  If your CAC is not PIV-II-compliant, no certificates will be listed in the Personal Tab. You will have to install the ActivClient 6.2 to use your CAC with Windows 7 (& 8).

2.  Install the latest DoD Certificates

3.  Add Outlook Web Access / Apps (OWA) address to your Trusted Sites (if you plan on using OWA).  The OWA website must be listed as a trusted site in IE 9 (if you have a 64 bit version of Windows).  It is also required for both 32 and 64 bit computers once IE 9 is installed.  Without adding it, you will not be able to sign or encrypt / decrypt your email.  Open IE 9 select Tools, Internet Options, Security.  Select the Trusted Sites zone (green checkmark), then click on the Sites (button).  Type the address for your OWA website [Examples can be found on the OWA page] in the box labeled "Add this website to the zone" and click Add.  The site will be added to the list.  Click Close and OK to exit the Internet Options window.

4.  Access web sites and authenticate with your CAC certificates in IE.  You will be prompted to select a certificate and enter your Personal Identification Number (PIN) as shown in the screenshots below.  IMPORTANT:  If you are accessing a web site that is linking back to your network account such as SharePoint or Outlook Web Access / Apps (OWA), you will need to select your E-mail certificate (the one that has "EMAIL" in the Issued By field) in order to authenticate.  The PIV Identity certificate (the one that does NOT have "EMAIL" in the "Issued By" field) will not work with your Active Directory account.  Your PIV Identity certificate can always be used to client authenticate to web sites that are not linking back to your network account.  Those accessing Army Knowledge Online (AKO) will continue to use the non-Email certificate.  Sites like the Air Force Portal and Navy Knowledge Online (NKO) usually use the Email certificate.