MOST PEOPLE ARE ABLE TO USE THEIR CAC WITH WINDOWS 10
Utilizing your CAC on Windows 10 "can" be as easy as...
However, computers don't always cooperate with us. So....
Here are my findings and solutions:
Information: Edge is the default web browser in Windows 10. Internet Explorer is on the computer and provides backwards compatibility for web pages that do not work with Edge.
On each website you visit, you have the option of selecting the 3 dots [settings] and selecting Open with Internet Explorer
My recommendation is to type: Internet Explorer into the Search the web and Windows / I'm Cortana / Ask me anything (box) in the lower left corner of your screen. Once Internet Explorer appears, right click Internet Explorer and select Pin to taskbar. Now it will be available to you anytime you need it without having to click the 3 dots.
Finding 1: You upgraded from Windows 7 or 8.1 and were using your CAC with little to no problems, and now you can't access CAC enabled sites. Keep reading for ideas to try:
Solution1 (built-In Smart Card Ability): Uninstall ActivClient 6.2.0.x or 7.0.1.x by "Right Clicking" the Windows logo "4 squares" [in the lower left corner of your desktop], select Programs and Features (now called Apps and Features), find ActivClient in your list of programs and select Uninstall, restart your computer and try the sites again. It may work, if it doesn't, try next Solution. Dual persona (PIV) users might be able to access their email using the built in Smart Card Ability, your results may vary, if it doesn't read your PIV, you will need to follow Finding 1, Solutions 2 or 3 below.
Finding 1, Solution2 (ActivClient): ActivID ActivClient 22.214.171.124 works great on Windows 10 computers and is available for Army users from links on the Army page. All other people will have to get it from you respective branch or purchase it to try it on your computer.
Finding 1, Solution3 (Smart Card Manager (SCM)): If your system doesn't allow you to access some (or all) CAC websites, download Smart Card Manager [Alternate download link Select: Smart_Card_Manager-1.0.1-6-2.exe ]
NOTE: Smart Card Manager WILL read the PIV cert on Windows 10 (as long as it has already been activated), and has been reported to stop the annoying constant PIN prompts some people get using the built in Smart card ability.
SCM ANOMOLY 1: When using Smart Card Manager, download the file to your desktop, in my tests, every so often I have to reinstall it again to access CAC enabled websites.
NOTE: One individual found that when he ran into an issue that reinstalling would fix, it was easier and worked just as well to run:
C:\Program Files (x86)\Fedora\ESC\regcerts.bat
SCM ANOMOLY 1a: If reinstalling doesn't work on its own, you may need to uninstall Smart Card Manager, then install it from the file on your desktop.
SCM ANOMOLY 2: After selecting your CAC certificate, the PIN pop up box may pop behind the page / PDF you are trying to sign. This is common when signing fillable PDFs.
Finding 2. I can't access encrypted emails when using the Edge web browser
Solution 2: The Edge web browser does not support S/MIME. See image above to see how to use Internet Explorer to read and send your encrypted emails when using OWA / webmail.
Information (from Microsoft): To understand the problem with OWA, Edge, and S/MIME you need to know the OWA S/MIME is an Active-X control. By design Edge does not support Active-X (or Browser Helper Objects); this is good from a security perspective, but bad if you want to use OWA with Edge. Windows 10/Edge is a work in progress, Microsoft is planning to use other technologies to replace Active-X sometime in the future. In the meantime use Internet Explorer 11.
Solution2a: If you are unable to select Internet Explorer because it is grayed out, type: Internet Explorer into the Search the web and Windows / I'm Cortana / Ask me anything (box) in the lower left corner of your screen. Once it appears, right click Internet Explorer and select Pin to taskbar. Now it will be available to you anytime you need it without having to click the 3 dots (like shown in image above).
Finding 3. I can't sign PDFs (Portable Document Format) like I did in Windows 7 and 8.1
Solution 3: To digitally sign PDFs, you need to use Internet Explorer, NOT the Edge web browser, and have Adobe Reader set as the default PDF viewer. NO other PDF readers will allow digitally signing of forms. This should happen automatically when installing Adobe Reader. However, if it doesn't, here is how to change the default viewer:
Type: "default" into the Search the web and Windows / I'm Cortana / Ask me anything (box) near the Windows logo at the bottom left of your screen.
Click: Default Programs at the top of the list.
Click: Associate a file type or protocol with a program.
Scroll down to .pdf, if it shows Adobe Acrobat Reader, it is set correctly, if it shows some other program, select .pdf and click the Change program.. (button) in the upper right corner of the screen.
"Adobe Acrobat Reader" should be in the list of choices, select it and then OK
Finding 4. How do I get to Internet Options in Edge? I can't find it.
Solution 4: Follow slide 5 of http://milcac.us/tweaks
Finding 5. Cannot see / select the Email (or PIV) cert in Windows 10
Solution 5: Windows 10 users will see the certificate selection differently than older versions of Windows. Click More choices to see additional certificates. Select the correct certificate and then click OK.
If you have questions or suggestions for this site, contact Michael J. Danberry
Are you interested in subscribing to the CACNews email list?
Last Update or Review: Thursday, 14 December 2017 20:39 hrs
The following domain
names all resolve to the same website: ChiefsCACSite.com,
CommonAccessCard.us, CommonAccessCard.info, & ChiefGeek.us
The following domain names all resolve to the same website: ChiefsCACSite.com, CommonAccessCard.us, CommonAccessCard.info, & ChiefGeek.us