CAC (Common Access Card) Guide: Getting and Using Your Military ID

## Quick answer The Common Access Card (CAC) is the standard identification for active-duty uniformed service personnel, Selected Reserve, DoD civilian employees, and eligible contractor personnel. It is a "smart" card containing an embedded microchip that allows for physical access to installations and logical access to secure military computer networks and systems like IPPS-A, MyPay, and the MHS GENESIS Patient Portal.

## In detail As of 2026, the CAC remains the mandatory method for authenticating your identity across all Department of Defense (DoD) digital platforms. AKO.org (Army Knowledge Online) began its transition years ago, making the CAC the primary key for soldiers to access their records, email, and training modules.

### Components of the CAC * **Integrated Circuit Chip (ICC):** Stores digital certificates (PKI) for signing, encrypting, and authenticating emails and documents. * **Magnetic Stripe:** Used for physical access and some older point-of-sale systems. * **Linear and Two-Dimensional Barcodes:** Contains your name, rank, social security number (encoded), and pay grade. * **Visual ID:** Includes your photo, branch of service, and expiration date.

### How to Get a CAC The process is managed through the **Defense Enrollment Eligibility Reporting System (DEERS)** and the **Real-time Automated Personnel Identification System (RAPIDS)**.

1. **Sponsorship:** You must be sponsored by a DoD official. Your personnel data must be updated in DEERS before you arrive at an ID card office. 2. **Appointment:** Most locations require an appointment via the [ID Card Office Online (IDCO)](https://idco.dmdc.osd.mil/idco/). 3. **Documentation:** You must provide two forms of valid ID (e.g., Passport, Driver's License, Social Security Card). 4. **Biometrics:** Your fingerprints and a digital photo will be taken, and you will select a 6-to-8 digit PIN.

### Using the CAC for Military Systems To use your CAC on a personal computer (for 2026 systems), you generally need: * **A CAC Reader:** USB-A or USB-C hardware. * **Middleware:** Software like ActivClient (though most modern Windows 11+ and macOS systems have "native" support). * **DoD Root Certificates:** You must install the latest "InstallRoot" tool from the DoD Cyber Exchange to ensure your browser trusts military websites.

### Comparison: CAC vs. DS Logon | Feature | Common Access Card (CAC) | DS Logon (Level 2) | | :--- | :--- | :--- | | **Physical Hardware** | Required (Smart Card) | None (Username/Password) | | **Security Level** | Highest (Two-factor physical) | High (Multi-factor authentication) | | **Primary User** | Active, Guard, Reserve, Civilian | Veterans, Retirees, Spouses | | **Login Speed** | Instant with PIN | Requires 2FA code via SMS/App |

## Who this applies to * **Active Duty & Reserve Soldiers:** Required for daily computer login, email access, and entry to secure facilities. * **DoD Civilians:** Mandatory for network access and time-reporting (ATAAPS). * **Contractors:** Specifically those requiring "logical access" to DoD networks or physical access to installations for more than 6 months. * **Family Members:** *Note: Family members receive a Uniformed Services ID (USID) card, not a CAC. While it looks similar, it lacks the chip for network login in most cases.*

## Common scenarios * **The New Recruit:** Private Miller graduates AIT in 2026. He is issued his first CAC at his first duty station at no cost. This card allows him to log into the Army’s "Bring Your Own Device" (BYOD) environment to check his Leave and Earnings Statement (LES). * **The Lost Card:** A civilian employee loses their CAC. They must report it to the local Provost Marshal's office or security manager to get a "Lost/Stolen" report. A replacement is issued at a RAPIDS site. There is generally no fee for a replacement due to fair wear and tear, but negligence may result in administrative action. * **The Remote Worker:** A reservist uses a $15 OMNIKEY card reader purchased from a PX to log into the TRICARE West portal (managed by TriWest) from their home laptop to check a referral.

## Related terms * **DEERS:** Defense Enrollment Eligibility Reporting System—the database that proves you are eligible for the card. * **RAPIDS:** Real-time Automated Personnel Identification System—the physical terminal and software used to print the card. * **PKI (Public Key Infrastructure):** The technology using digital certificates to prove your identity online. * **PIN:** Personal Identification Number—the 6-8 digit code you must enter every time you use the card. * **T-5 Contract:** The 2025/2026 TRICARE contract cycle where systems often require CAC or DS Logon for TriWest (West) or Humana Military (East) access.

## Sources * **ID Card Office Online (DMDC):** [https://idco.dmdc.osd.mil/idco/](https://idco.dmdc.osd.mil/idco/) * **DoD Cyber Exchange:** [https://public.cyber.mil/pki-pke/](https://public.cyber.mil/pki-pke/) * **TRICARE.mil:** [https://www.tricare.mil/cac](https://www.tricare.mil/cac)

***

*Disclosure: AKO.org — Army Knowledge Online is an independent reference site and is not the official TRICARE program or Department of Defense entity. For official policy and card issuance, visit TRICARE.mil or the DMDC website.*