Bad / cross-signed DoD certs in the Mac keychain

macos

Symptoms

Cannot authenticate to DoD sites on Mac even after installing the AllCerts bundle.

Likely cause

Old Federal Bridge or Interoperability certs are still trusted and outranking the DoD chain.

Fix

1. Open Keychain Access > login > All Items. 2. Find and delete every entry of: DoD Root CA 2 (light blue background only), DoD Interoperability Root CA 1/2, Federal Bridge CA 2016 or 2013, Federal Common Policy CA, SHA-1 Federal Root CA G2, US DoD CCEB Interoperability Root CA 1. 3. Close Keychain Access; retry.

Sourced from militarycac.com. Rewritten for clarity.

Didn't work, or need it tailored to your setup?

Ask the AI assistant