Use CAC on Android

Android CAC support is more limited than iOS, but works with the right reader and the right app.

~20 min · 4 steps

Stuck on a specific error? Describe it to the AI assistant for a tailored fix — or check our error code reference.

Steps

1
Get a USB-OTG CAC reader
You need a reader with USB-C (modern Android) or micro-USB. Common: SCR3500 series with USB-C cable. Check 'USB On-The-Go' is enabled on your phone.
2
Install Sub Rosa / TF Maverick
From Google Play, install 'Sub Rosa' (free) or 'TF Maverick' as a CAC-aware browser. Stock Chrome on Android does NOT support CAC.
3
Install DoD certificates
Inside Sub Rosa, import the DoD certificate bundle from cyber.mil. The app uses its own cert store separate from Android system.
4
Authenticate
Open Sub Rosa, plug in your reader + CAC, navigate to your .mil site, enter PIN when prompted.

Reader not detected

Check Settings → Apps → permissions for USB device. Try a different cable. Some Samsung phones disable OTG by default in Settings → Connections.

PIV vs Sub Rosa licensing

Sub Rosa is free, but enterprise features need a license. The free version is sufficient for personal use.

Still stuck?