Installing the driver and updating the firmware on an SCR-331 USB CAC reader. Centrify Express for Smart Card is a complimentary version of the same enterprise-hardened Centrify Smart Card technology used in federal agencies that require authentication for CAC, CAC NG, and PIV smart cards.
Installation Steps |
| Step 1: Obtain a CAC Reader |
| Step 2:CAC Reader driver / Video |
| Step 3:DoD Certificates / Video |
| Step 4:ActivClient / Video |
| Step 4a:Update ActivClient |
| Step 5:IE adjustments/Video |
| Log into AKO with your CAC now ---------------- Proceed ONLY if you need to sign forms |
| Step 6:IBM Forms Viewer (formerly Lotus Forms) / Video |
| Step 7:eSign / ApproveIt / Video |
| Page Quick Links: |
| Firmware Update for SCR-331 |
| Verify SmartCard Service started |
| Start Smart Card Service PDFs |
| Updating a CAC Driver |
Plug in your CAC reader NOW
NOTE: Please check and make sure your CAC reader installed BEFORE you attempt to follow the driver installation instructions below. Most of the time, the New hardware wizard will install the CAC reader automatically, negating the need for you to install the driver manually.
To Verify whether your driver did or did not install, follow these instructions:
Plug your CAC reader into your computer before proceeding
Vista, 7, & 8: Right click Computer, select Properties, Device Manager link (upper left corner of the screen), scroll down to Smart card readers, select the little triangle next to it to open it up. If your smart card reader is listed, go to the next step of installing the DoD certificates. NOTE: If you can't don't see it, click Start, In the Start Search line type in: devmgmt.msc. (For Windows 8.1 users, you'll right click Start.
XP: Right click My Computer, select Properties, Hardware tab, Device Manager button, scroll down to Smart card readers, select the + next to it to open it up. If your smart card reader is already listed, you can go to the next step of installing the DoD certificates.
If it did not install correctly... Try this first: Go to Device Manager (Instructions are above), scroll down to Smart Card readers, right click the CAC reader that shows up below Smart Card Readers. It could also be under unknown devices. Select Uninstall. It will give you a message. Once it is uninstalled, unplug the reader from your computer. Wait a few moments, then plug it back in. It 'should start to install itself. If that doesn't work, keep reading for other ideas below.
IF you do not see Smart card readers when checking, THEN follow along with the steps below.
To install a driver onto your computer for a CAC reader, you need to first download the correct driver for the hardware you purchased, I have drivers for the most common USB Readers, Keyboard, laptop, & desktop card readers
PROCEED TO STEP 3 ONCE YOU'VE COMPLETED YOUR VERIFICATION OR INSTALLATION
Unzipping - the driver
Windows 7, Vista, or XP- Save the zip file to a location of your choosing. Once you have the zip file downloaded, open the zip file (Windows built in zipping program). Copy the folder inside to a new folder. It will unzip the contents, (This is the folder you will need when you are doing the steps below). You can also use the Extract All Files button (on the left under Folder Tasks, under File, Extract All). It will then ask where you want to save the file too. I recommend just putting a backslash ( ) at the end of the location already on the screen.
WinZip- Use the Extract button. It will ask you where you want to save the extracted files to, I recommend your desktop. Click the desktop icon on the left. Push the little yellow folder in the upper right corner of this active window. It will prompt you for a name for the folder (type in CAC Driver). Hit OK, then select Extract (lower right corner of this window). You should now see your new folder on your desktop to open up. Keep this for a later step.
Updating the Driver - Example is for an SCR-331
Windows 7, 8, & Vista - Right Click Computer, Select Properties
Click the Device Manager link (on the left side of your screen)
Select the triangle next to Smart Card Readers
Right click the SCRx31 USB Reader, select Update Driver software
Browse my computer... Select Browse, then desktop (or wherever you made the folder)
NOTE: One person had to select 'Search automatically for updated driver software' (This is very rare)
Select the folder (if using the firmware update driver below, stop at the driver folder, do not 'dig' down to AND or Intel folders) and then OK. Next
Your driver will be installed.
Windows XP - Right Click on My Computer, Select Properties,
Go to the Hardware tab, Select Device Manager,
Select the + next to Smart card readers.
Right click on SCR33x USB Smart Card Reader.
Select Update Driver, then No, not at this time, Next,
Select Install from a list or specific location (Advanced), Next, Unselect Search removable...,
Select Include this location in the search:, now hit Browse, find the folder we made a few moments ago.
All you have to do is select the folder and hit OK, Next, It should do the rest on its own. Select Finish when complete.
Updating the Driver - for IOGear GSR-202 reader
Plug your IOGEAR CAC reader into an available USB port
Allow Windows to load the generic driver
Go to the IOGear website and download the driver for GSR 202 CAC Reader to your desktop
Create a folder on the desktop to extract the driver's zipped files
Unzip the file to the folder you've created
Go to Device Manager
Select the CAC reader
Right click the driver
Select properties
Select update driver
Select Browse
Select the IOGear driver from the desktop folder. This is the unzipped IOGEAR folder
The driver gives you two choices: 32 bit and 64 bit. (this must match your version of Windows)
Install the driver
Insert your CAC into the CAC reader
The yellow light on the CAC reader should blink rather than remain a solid yellow
If the yellow light blinks on the CAC reader, then the computer has added the smart card as a device and the card will work properly
FIRMWARE UPDATE for SCR-331 Reader
(Requires a physical Windows computer, Mac using Bootcamp, or LPS (see next sentence below). It will NOT work in virtual Windows (examples: VMware, Parallels, or Virtual box)).
Intel based Macs can update the firmware using LPS (instructions on top of PDF page 37 (document page 34)) Video instructions
The firmware update 'should' fix the following problems:
A. Card reader is not recognized
B. Shows up as 'STCII Smart Card Reader'
C. Shows up as 'USB Smart Card Reader' (not necessarily a problem)
D. Does not read your 'Gemalto TOP DL GX4 144', 'Oberthur ID One 128 v5.5 Dual' CAC.
E. Does not read your CAC when using your Mac
F. Trying to use the Windows 7 built in Smart Card service instead of ActivClient.
NOTE: We are hearing more and more Mac users having problems with the SCR-331 reader. A recommendation is to get a Mac compatible reader.
Installation Instructions:
| 1. Download update file from MilitaryCAC or Identive |
| 2. Unzip the downloaded file (by Right-clicking and selecting Extract All) |
| 3. Update the driver present in the 'driver' folder (by following guidance above) |
| 4. Once the driver is updated, Run FWUPDATE.EXE (lightning bolt) in the 'app' folder to update the firmware. Select the default choices. |
| 5. Close all programs, restart your computer |
NOTE: If you computer fails to recognize the CAC reader driver, you may need to try a different computer to do the update.
Now your SCR-331 reader can be used with Windows 8, 7, Vista or Mac.
FIRMWARE UPDATE for SCR-3310 reader
(V1 ONLY (doesn't have V2 after SCR-3310 on the label))
(Requires a physical Windows computer, Mac using Bootcamp, or LPS (see next sentence below). It will NOT work in virtual Windows (examples: VMware, Parallels, or Virtual box)).Intel based Macs can update the firmware using LPS (instructions on PDF page 37 (document page 34)) Video instructions
NOTE: DO NOT use this update on a V2 reader. There is no firmware update for a V2 because it is already updated.
Click on FWUpdate.exe, this will update your firmware to version 5.26
CHECK SERVICES to make sure Smart Card is running
(This Video shows a very basic version on how to start the service)
If your CAC reader is still not seen by ActivClient, make sure that the Smart Card service is running.
Here's how: Go to: Start, Run (in XP), Start Search (in Vista), Search programs and files (in Windows 7), Right click Windows 'start button' select Run (Windows 8.1), type: Services.msc Scroll down to Smart card, double click it and set it to automatic and click Start
If you are unable to start the service; It doesn't show up; ActivClient still says no reader attached; or it acknowledges you have a CAC in the reader (but you can't access it) follow these registry edits below.
Windows 8 & 8.1
Automated method (double click the .reg file inside the .zip folder)
Windows 7 & Vista
Automated method (double click the .reg file inside the .zip folder) from MilitaryCAC
Automated method (with instructions) from Lazybit
Manual method for Windows 7 & Vista systems (mirror your registry settings to the PDF links below for your specific version of Windows).
Windows XP
Automated method (double click the .reg file inside the .zip folder)
Alternate cure for XP (Requires your original XP installation CD)
Anytime you make changes to the Registry it is a recommended you back it up first
Cac Card Software For Mac
If ActivClient still does not see the CAC reader, try these ideas (if they don't work, your only other option is reloading Windows onto your computer).
Installation Steps |
| Step 1: Obtain a CAC Reader |
| Step 2:CAC Reader driver / Video |
| Step 3:DoD Certificates / Video |
| Step 4:ActivClient / Video |
| Step 4a:Update ActivClient |
| Step 5: IE adjustments | Video |
| Log into AKO with your CAC now ---------------- Proceed ONLY if you need to sign forms |
| Step 6:IBM Forms Viewer (formerly Lotus Forms) | Video |
| Step 7: eSign | Video |
(The CHESS website has scheduled outages: Saturdays between 0200-0500 EST and the 2nd & 4th Tuesday of the month between 0700-1200 EST)
If you are having problems accessing the Lotus Forms software download link outside of the hours listed above, please contact CHESS for support.
NEWS:Army migrating to Adobe fillable forms. Army Publishing Directorate were to begin conversion of the Army's inventory of existing IBM Lotus forms to PDF in the first quarter of FY 14 with a completion by the end of FY 14. Beginning in FY15, Lotus Forms and ApproveIt / eSign software will no longer be supported. This is great news for Mac users since Lotus and ApproveIt has never worked for them. Please know that the current EES system requires Lotus Forms and eSign to allow signing of OERs (currently) and NCOERs (in the future).Installation Steps:
Download / Save this page as single / printable PDF
1. Go to the Army CHESS website at: https://chess.army.mil
2. Click the Login button (located on the black bar across the top of the page)
NOTE: If you are CAC enabled through CHESS you will see your information displayed. Click the Login button to fully access the website. If you are NOT CAC enabled on the Army CHESS website you will prompted for your email address and password. This is the email address and password you used when you registered at the CHESS website. If you have not registered you need to click the Registration (button) on the black bar on the top of the page.
4. Click the link titled: Silanis eSign
5. Click the upper right corner link titled: Download Silanis eSign
You may be prompted at the bottom of your screen asking if you want to Save or Save As, select Save or Save As.
Alternate download (directly from AKO): https://www.us.army.mil/suite/doc/39474482 (42.9 MB)
6. Once the file is downloaded, Right click the file titled: e-Sign_6.6.zip, and select Extract All,
7. Once the files are extracted, open the foldertitled: eSign_6.6 and select setup.exe (82 KB Application file), followed by Yes.
NOTE: If you receive: 'The module 'C:Program Files (x86)ApproveItADTMSOADDIN.dll' was loaded but the call to DIIRegisterServer Failed with error code 0x08007005.' This generally means a lack of administrative privileges. You'll need to 'Run as Administrator' to install the program, or login as an administrator to install.
NOTE: Look under the Compressed size column, IF you see a 30KB setup file, this means you are in the zipped folder, and not the new extracted folder. Review step 6 above
NOTE: If you are prompted for a serial number, it means you did not extract the files in step 6 above, or you did not select the correct setup file in step 7 above
8. Select Next, Accept the license, Next,
eSIGN / APPROVEIT INSTALLATION PROBLEMS AND SOLUTIONS
9. The program does not inform you when it finishes installing, so [my personal recommendation] is to verify the software installed by going to Control Panel: Uninstall a Program (Windows 7 / 8 / Vista), Programs and Features (Vista), or Add / Remove Programs (XP) look for e-Sign Desktop 6.6.
10. Restart your computer, then come back to this page to use the Sample Form below OR save it to your desktop now.
NOTE: IF my instructions confused you above, an individual sent the below instructions that may be easier for you to follow.
Older ApproveIt 6.5 download: https://www.us.army.mil/suite/doc/36567209
Video Installation Instructions (for ApproveIt 6.5), new version coming soon
Test your digital signature with the below links:
Note, if you are not seeing the digital signature on the PDF, make sure you have Adobe Reader installed. The Windows 8 / 8.1 built in PDF reader will not work for digitally signing.
NOTE: Internet Explorer 8, 9, 10 & 11 users need to look at slides 19-20 of this guide If not, they along with: Firefox, Chrome, Safari, and Opera web browser users will receive 'gibberish' when clicking the Lotus Forms .xfdl link above. You need to right click the 'sample form' link and select Save Link As / Download Linked File As / Save to Download Folder. Save it to your desktop, then test from your desktop. If your computer downloads it as a .txt file, right click it and change it to .xfdl
IE 9 & 10 users look here for other options
Compatibility view for IE 8, 9, & 10
This can also remedy problems using Forms (on AKO) for digitally signing and routing forms.
If you are not familiar with signing forms with your CAC? Look here for instructions. Visual steps, or Watch Video
CONGRATULATIONS, YOU HAVE NOW SUCCESSFULLY INSTALLED ALL NEEDED PROGRAMS ON YOUR COMPUTER.
The ideas on this website are from my personal experience. I have been told by Army Publishing Directorate (APD) to send users to their help desk so they become aware of the problems with this program. 703-692-1306 / DSN: 312-222-1306 , Webform, or
If you are having problems accessing the CHESS website, contact theCHESS help desk at: armychess@mail.mil or 888-232-4405 / 703-806-1019 / DSN: 312-656-1019 (Monday - Friday 0800-1700 Eastern).
Alternate install instructions:
After making the first attempt to install the Silanis E-Sign software
Open the Silanis_eSign.zip folder
Double click setup.msi
Clicked More Info in the pop up Windows dialog box
Clicked Run Anyway in the pop up Windows dialog box
Selected Modify with a radio button
Clicked the Next button
Clicked on the down arrow for the e-Sign for IBM Lotus Forms
Look at image below.
| eSign / ApproveIt Desktop enables users to approve, verify and securely print documents, forms, letters and spreadsheets. eSign / ApproveIt uses Silanis Intelligent Signature Technology, which is a form of electronic signature developed by Silanis and is based on digital signature technology. The Silanis Intelligent Signature Technology electronically signs the content of documents or forms that are presented to the user in Adobe Acrobat, Adobe Reader, Microsoft Word, Microsoft Excel, Lotus Forms, PureEdge Viewer, and FormFlow. Upon signing a document or form with eSign / ApproveIt Desktop, the electronic signature and audit trail information is embedded within the structure of the document or form and becomes a permanent part of it, much like a wet ink signature on paper. |
If you are interested in knowing how to digitally sign a memorandum, this is how to do it (Word 2003 & 2007 only) (Word 2010 & 2013) read the sentence below.
NOTE: If you have Office 2010 or 2013 installed you may need to configure eSign / ApproveIt to get the ApproveIt tabs back. Follow this page.
If you need to completely uninstall eSign / ApproveIt, follow this information.
To download blank DA forms, go to the Army Publishing Directorate website http://www.apd.army.mil/ , click on the Forms (tab) DA Forms button. Find the form you want (in the range of form numbers). Right click the XFDL link to the right of the form you want, Select Save Target As. Save it to your computer and you will have the form for later. You can also click the link, it will open up your Lotus Forms or Pure Edge software automatically (only if using Internet Explorer 6, 7, or 8). All other browsers will have to use the Right click, Save As option to save your form.
Digitally signing a form is simple when following these instructions
With your form open and your CAC inserted in the card reader
Single click the button with the slanted pen with 'Click to Approve' typed after it (see image)
Read the Electronic Signature Notice, then OK
Click the word Sign (not OK)
Select your name (the one without the word email in it), then OK
Dod Cac Card Reader Driver
You should see your name, once you do, click the word Sign
It will prompt you to type in your PIN, then select OK
Once you see Signature is valid, select OK
Dod Cac Card Reader
You have now signed your form
If the word Sign is GRAY, please look here for some known solutions
Fix the ePersona message when trying to sign
Watch Silanis Electronic Signatures 2-minute Presentation
This is the email I received from APD on 25 August 2010 when I asked for permission to have an alternate download location for people when the CHESS website is down.
'In regards to your email, As I am sure you are well aware APD is the Enterprise provider of Lotus Forms Viewer and Silanis ApproveIt software. There are only two channels that are authorized to be the authoritative distributor of the fore mentioned software, 1. AGM (Army Gold Master) for GFE (Government Funded Equipment) installation / use and 2. CHESS (Computer Hardware, Enterprise Software Solutions) for PFE (Personal Funded Equipment) installation / use. APD does not authorize any other body (i.e. AKO) to distribute its Enterprise Software. Your request to have this software hosted in your files has been dually noted. At this time your request to host / provide the Lotus Forms Viewer and Silanis ApproveIt software is Denied. You will be advised if APD's stance on this request changes in the future.'
For issues obtaining the software from the CHESS website, utilize the Official Army channels for assistance.
The ideas on this website are from my personal experience. I have been told by Army Publishing Directorate (APD) to send users to their help desk so they become aware of the problems with this program. 703-692-1306 / DSN: 312-222-1306 , Webform, or