Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The NPS video portal system, when playing an encrypted video stream, uses and many other enterprise IT systems in use at NPS, make use of SSL certificates issued by the Department of Defense.  Your browser must trust these DOD-issued certificates or else you may get an error or simply not see the player at all.    Not trusting the DOD certificates may cause issues with other websites or services as well.   Download the public certificates needed using one of the methods listed below.  

UI Text Box
typeinfo

The Firefox browser on both Mac and Windows maintains its own list of trusted certificates, and does not get these from the operating system.   Firefox users must use the GUI-based tool (see below), or manually install the certificates one by one.

...

DoD.  If your browser doesn't trust them, you may run into issues.  Reinstalling the certs is always a good step in troubleshooting as well. 

OPTION 1 - Automatically Trust All DOD Certificates (Recommended for Windows)

The InstallRoot application is the most simple and straightforward way to install all DOD certificates in your windows operating system, and supports Internet Explorer, Chrome, and Firefox.   The links below will let you download the tool from the DISA.MIL website (we don't host the files here so that you can get the latest version, as it's frequently updated).

  • Download the InstallRoot Application for Windows (recommended - requires Java installed)
    The GUI-based tool is the best way to install the root certificates for both MSIE/Chrome as well as Firefox in Windows.  It requires Java to be installed on the workstation.  Don't forget to run it twice - once for the Windows certs, and again for the Firefox certs.

...

UI Button
newWindowtrue
colorblue
titleDownload InstallRoot 4 for Windows
urlhttp://iase.disa.mil/pki-pke/Pages/tools.aspx

  • Click the button above to go to the DISA tools webpage in a new window or tab.
  • Click on the Trust Store menu item from the PKI and PKE tools page.
  • Under the heading "InstallRoot 4.1: NIPR Windows Installer click the links to download the latest 32bit and 64bit versions of the tool.
  • When downloaded, right click on the file and select "Install as Administrator"
  • Restart your browsers for the changes to take effect (all windows!).
  • InstallRoot 4.1: User Guide

OPTION 2 - Manually Install the DOD Root Certificates (All Systems / Browsers)

Section
Column
width33%

You can manually download the root certificate and any intermediate certificates needed when using SSL-based websites or services at NPS.   

The CA-2 root is always required, and you'll also need to install the intermediate certificate for each application you intend to use.  E.g. For the NPS streaming video, your browser needs to trust CA-2 and both CA-21, CA-27, and CA-28.     By installing all the certificates, your web browser will trust all DOD sites that use SSL - not just those currently in use here at NPS.

Firefox users - Firefox uses its own set of trusted certificates, outside of the operating system. This is the same on windows and Mac. Please keep that in mind when you are installing them manually. click here for help with installing the certificates in Firefox.

Column
width66%

Certificate

Purpose

DOD CA-2

Root certificate for all intermediates - required for all uses.

Certificate

Purpose

DOD CA-21

NPS AD/LDAP, NPS Webmail, NPS CAS, NPS Streaming Video

DOD CA-22

Not currently used by NPS

DOD CA-23

Not currently used by NPS

DOD CA-24

Not currently used by NPS

DOD CA-25

Not currently used by NPS

DOD CA-26

Not currently used by NPS

DOD CA-27

NPS Extranet, Faculty Website, NPS Survey, NPS Webmail, NPS AD/LDAP, NPS Streaming Video

DOD CA-28

NPS

DOD CA-29

Not currently used by NPS

DOD CA-30

Not currently used by NPS

DOD CA-31Not currently used by NPS
DOD CA-32Not currently used by NPS

 

 

Download All

All certificates listed above in one archive