Question / Problem: How do I "add" a PIV certificate to my CAC, so, I can access my DoD Enterprise Email, or I'm being directed to do it?  Technically, the PIV certificate is already on your CAC, but is hidden by default.  This may be a reason why you cannot access your webmail. 

.

Some information: 

--Your system needs to be all 32 bit or all 64 bit, which means:

PIV Activation on a 64 bit Windows Computer

Reminder:  All Army CACs issued since 1 March 2018 have the PIV already activated.  This information is for anyone with a CAC issued prior to 1 March 2018.

Information:  The same settings are required to change your email address on your CAC.

.

NOTE: This process will NOT work with the built in Smart Card utility in Windows 10, 8.1, or 8.  It requires ActivClient / ActivID on the Windows computer

PIV Activation Step 1- Install ActivClient / ActivID

-64 bit ActivID 7.1.0.153 (Windows 10, 8.1, & 8 users)

PIV Activation Step 2- Install 64 bit Java from https://java.com/en/download/manual.jsp, Select: Windows Offline (64-bit) using Internet Explorer

 .

PIV Activation Step 3- Add 3 web addresses to:  Control Panel > Java > Security (tab) > Edit Site List:   https://pki.dmdc.osd.mil, https://www.dmdc.osd.mil, and https://idco.dmdc.osd.mil

PIV Activation Step 4- In Internet Explorer 11 (this process will NOT work with other web browsers), Select Enable 64-bit processes for Enhanced Protected Mode* [in Internet Options, Advanced Tab] to run IE in 64 bit mode.  By default, IE 11 runs in 32 bit mode.  More information can be read here. 

PIV Activation Step 5-  Visit https://www.dmdc.osd.mil/self_service  after watching video above

NOTE:  I have had one report that adding dmdc.osd.mil to the trusted sites in Internet Explorer helped them.

PIV Activation on a 32 bit Windows Computer

Reminder:  All Army CACs issued since 1 March 2018 have the PIV already activated.  This information is for anyone with a CAC issued prior to 1 March 2018.

Information:  The same settings are required to be change your email address on your CAC.

NOTE: This process will NOT work with the built in Smart Card utility in Windows 10, 8.1, or 8.  It requires ActivClient / ActivID on the computer

PIV Activation Step 1- Install ActivClient / ActivID

-32 bit ActivID 7.1.0.153 (Windows 10, 8.1, & 8 users)

PIV Activation Step 2- Install Java from https://www.java.com using Internet Explorer

PIV Activation Step 3- Add 3 web addresses to:  Control Panel > Java > Security (tab) > Edit Site List:   https://pki.dmdc.osd.mil, https://www.dmdc.osd.mil, and https://idco.dmdc.osd.mil

-32 bit Internet Explorer (this process will NOT work with any other web browser) (Start, All Programs, Internet Explorer) Windows 8, do NOT use the IE from the tiles menu

PIV Activation Step 4-  Visit https://www.dmdc.osd.mil/self_service  after watching video above

NOTE:  I have had one report that adding dmdc.osd.mil to the trusted sites in Internet Explorer helped them.

Immediately after your PIV is activated, remove your CAC from the reader, then reinsert it.  You "should" now see 4 certificates when looking in Internet Explorer, Tools, Internet Options, Content (tab), certificates (button), Personal (tab).

Non-Solution for Mac Users:  I have not found any way for you to activate your PIV using a Mac.  The recommended method is to find a Windows 10 or 8.1 / 8 computer and follow Instructions above.

Solution 2:  DMDCs Self Service website is working better now than it did originally for activating users PIV authentication certificate. 

 .

Question:  What exactly is "Dual Persona?"

Answer:  The easiest way to explain is to give you an example:  an Army Reserve [or Guard] Soldier who is also a DoD civilian [or contractor] who is authorized [or required] to have / carry / use two separate CACs.  We have found people who were previously a contractor [or civilian] during the past three to five years [even if they left the job a year ago] are still classified as a Dual Persona in the eyes of DMDC and DISA.

Individuals that fall into this category HAVE to activate their PIV certificate to be able to access their email in the DoD Enterprise Email.  If you want to validate this prior to going through this process.  Call the Army Enterprise Service Desk-Worldwide at 866-335-2769 and select Enterprise Email.  Ask the agent to look in DEPO to verify if you are PIV AUTH.

Question:  What do I do if I add PCC to UPN on my CAC on the DMDC Self Service website, resulting in a .letter after my DoD ID number?  This renders the certificate useless for Army personnel.  This is not the case for other branches of the military.

Answer:  Follow this guide to remove the PCC from UPN on your Army CAC

NOTE:  Java 7 update 71 was the last version that had the ability to slide the Security bar to Medium.  This is needed for the DMDC Self Service (PIV activation) site to work, read more here.  You can update to the current version of Java once you activate your PIV cert.

Download Java 7 update 71 (64 bit) from MilitaryCAC

Download Java 7 update 71 (32 bit) from MilitaryCAC