Ask a Question

How to install the 2048 ECA Root and Intermediate Certificates

Problem

The most common problems this fixes:
1. Incorrect ECA Certificate path (a common reason users may not be able to access their DoD sites).
2. Inability to install their renewed or enrolled for certificate.

Cause

The intermediate and/or root certificates required to validate ECA certificates are missing, outdated or invalid.

Solution

Please install the certificates within Internet Explorer and Firefox, this can save hassle later. 
Installation through Chrome, Safari, AOL, or any other browser is not supported.
 

Download
1. Create a folder to keep track of your Certificate downloads: On your desktop, right click and click new, then folder. Name the newly created folder "ECA Certificates".

2a. Option 1: Download: ECA Certificate ZIP file

2b. Option 2: If the ZIP file above doesn't work for you, download the 6 files attached at the end of this article (scroll to the bottom)

3. Once your folder contains the 6 certificates (opened zip contents) continue to install on both browsers.

4. If you have any issues with the DoD downloads or to learn more about the DoD root certificates, please visit their site at: dodpki.c3pki.chamb.disa.mil/rootca.html

Install on Internet Explorer
1. Verify that you have all 6 certificate files in your "ECA Certificates" folder on the desktop.
2. Right click on ECAIntermediate2048.cer and select "install certificate."  Certificate Wizard will open.
3. You need to choose "Place all certificate in the following store, then browse to the "Intermediate Certification Authorities" and click "Next", then "Finish."  You will be prompted that the certificate was imported successfully.  Use the same path for the Verisign G3 Cert Intermediate.p7b file.
4. For the other 4 files, follow the same process but choose "Trusted Root Certification Authorities" folder path when you browse for a location.
5. You will be prompted to accept each certificate, and since the DoD root certificates are in bundles, this will be done several times.  Accept all certificates.  It is normal for Windows to already have some of the DoD certificates on the system so ignore any errors about that. 
6. After you install all 6 files, you can delete or backup this "ECA Certificates" folder we instructed you to create on your desktop - it is not required to use the ECA Certificates. 

Install on Firefox
1. Verify that you have all 6 certificate files in your "ECA Certificates" folder on the desktop.
2. Navigate to the Firefox menu - it looks like a sandwich .  (Directions below will be for the most recent version of Firefox, if you have an older version the path will be similar)
3. Choose Options (cog, below center) ► Advanced wizard hat ► Certificates tab ► then click View Certificates ► choose Authorities tab ► then click Import.
4. Select each certificate in turn and click open.  You may need to change the file type (to the right of the file name) to "All Files (*.*)" to view the certificates.
5. Check all 3 'purposes boxes', and click OK. You may get a warning that "This certificate is already installed as a certificate authority" which can be ignored.
6. Once all 6 certificates are installed, you can delete or backup this "ECA Certificates" folder we instructed you to create on your desktop - it is not required to use the ECA Certificates. 

 

Email: eca_support@symantec.com with errors installing or downloading these certificates.