Invalid Website Security Certificate

What do I do if I receive a warning about this website's security certificate?

Click the link to "Continue to this website..."

If you are receiving a warning that this site is untrusted/insecure, you will need to install the "DoD Certificate." STEPP uses a certificate to identify itself to its users and to enable secure connections. To download the DoD Certificate, please go to https://www.dodpke.com/installroot/ or http://dodpki.c3pki.chamb.disa.mil/rootca.html. Then follow the steps below for installing it to your computer. For questions or problems with this, please contact the DISA OKC OST at 1-800-490-1643 or by email at disa-esmost@csd.disa.mil.

  1. Download and save the root certificate to your computer at a place where you will easily find it.
  2. Open Internet Explorer.
  3. Open Tools.
  4. Open Internet Options.
  5. Open Content.
  6. Open Certificates.
  7. Click on the "Trusted Root Certification Authorities" tab and search for DoD Root CA 2 certificate.
  8. If it is not found, click Import.
  9. Click Next.
  10. Browse to find the certificate you downloaded. To find it, you will need to change the "file type" to PLCS #7 certificates or All Files.
  11. Click Open and Next.
  12. Choose the default "Place all certificates in the following store" and click Next.
  13. Click Finish.
  14. Click "YES" several times before it displays that the import is successful.
  15. Click Close and OK.
  16. Close the browser. Then return to STEPP.

You may also put STEPP into your Trusted Sites by going to Tools > Internet Options > Security Tab. Select "Trusted sites" and click the Sites button. Add the website to the zone and uncheck the box "Require Server Verification..." Press the Close button and then the OK button.