MilitarySmartCards

Windows Setup

Windows 10 and 11 have native CAC support. Here's the complete setup, from plugging in a reader to a successful login.

Last reviewed: July 2026

Before you start

  • A smart card reader, plugged directly into the PC.
  • Windows 10 or Windows 11 with current updates.
  • About ten minutes.
Good news: Windows has had built-in smart card support for years. For most people, no middleware is required — the whole setup is "insert card, install certificates, log in."

Step-by-step

  1. Plug in the reader and insert your CAC Chip end first, gold contacts up. Windows will install the reader automatically the first time — wait for the "device is ready" notification.
  2. Let Windows read the card On first insertion, Windows launches a background service that copies your card's certificates into your personal certificate store. Give it a minute. You may briefly see a smart card notification in the system tray.
  3. Install the DoD certificates Follow the Windows section of the certificate guide. This is the step most people skip, and it causes most login failures.
  4. Verify the card is visible Press Win+R, run certmgr.msc, and open Personal → Certificates. You should see certificates with your name. If not, see the services check below.
  5. Sign into a site Open Edge or Chrome, go to a CAC-enabled site, choose your authentication certificate (the one with your 10-digit DoD ID), and enter your PIN when Windows asks.

If the card isn't detected

Two Windows services do the work. Check both:

  1. Open the Services console Press Win+R, type services.msc, press Enter.
  2. Check "Smart Card" Find the service named Smart Card (SCardSvr). It should be Running with startup type Automatic. If not, double-click it, set startup to Automatic, and start it.
  3. Check "Certificate Propagation" This service (CertPropSvc) copies certificates from the card to your profile. Set it to Automatic and start it, then remove and re-insert your CAC.

Do I need ActivClient?

Almost certainly not. ActivClient is licensed middleware deployed on government machines; it is not offered as a free public download, and modern DoD websites work with Windows' native support. If some legacy application truly requires middleware, talk to the organization that owns that application — they're responsible for licensing it to you.

Old middleware causes new problems. If a years-old copy of ActivClient or another smart card utility is installed, it can fight with Windows' native stack. Uninstalling it, rebooting, and letting Windows handle the card natively fixes a surprising number of "worked yesterday, broken today" cases.

Browser notes

  • Edge and Chrome use the Windows certificate store — nothing extra to do.
  • Firefox needs one setting flipped — see the browser guide.

Next: browser setup or signing PDFs and email.