Obtain the intermediate and root certificates in the certificate chain of your CAC cards. To obtain the CAC certificates, perform the following steps:
Task
-
Plugin the CAC card reader in the Windows client machine which is used to access the Manager. The drivers for the smartcard reader are automatically installed and detected. If the drivers are not installed automatically, you have to manually install the drivers for the smartcard reader.
To troubleshoot problems with CAC card reader installation, see Installing and updating the CAC reader driver/Firmware update/Check services to make sure Smart Card is running.
- Once the CAC card reader is active, plugin the CAC card.
-
In the Internet Explorer browser, navigate to
Internet Options → Content → Certificates → Personal.
The certificates of the card are available in the Personal tab. There are three certificates corresponding to the card's user, two for email and one for ID.
-
Select the certificate for ID and click
View.
The Certificate window with the details of the certificate opens.
- The Certification path tab lists the chain of the certificate.
- Select the intermediate certificate which is the issuer of the leaf and click View Certificate to view the intermediate certificate.
- Go to the Details tab in the Certificate window and click Copy to File. This allows you to export the certificate. Choose any of the .cer formats and save it to a file. Trellix recommends you to select Base-64 encoded option as it is compatible with the Manager. Create a new folder for the certificates as "Saved intermediate and root certificates".
-
Repeat the process for the root certificate and save that to a file as well.
Note
The root and intermediate certificates can be obtained simultaneously by obtaining the certificate chain.
-
Convert the certificates to .pem format and save them in a separate file.