Custom DOD Cert Installer (WiX)

Note: This article has been superseded by our more recent article Custom DOD Root CA Installer (WiX).
If you have ever done work with the Government or Military, then you know all too well that in order to access nearly any Government website you need a CAC card. Beyond needing a CAC, your machine needs to have the DOD Root CA’s installed on it as well. There are many sites that provide instructions on how to accomplish this task, but we need a click and run executable that requires no computer literacy to install. Beyond that, we would really like to deploy the root certs via GPO. Below we will build a click and run msi installer that will install the DOD root certificates and run the FBCA crosscert removal tool.
Note: While all individual downloads are linked below to their original sites, you can skip the required software step (with the exception of WiX) by using the installer source download link at the bottom of the article.

Required software


  • Download and install WiX v3.10.
  • Download and extract the DOD Installer Source below.
  • Note: all source files must be in the same directory in order to compile.


  • Building the installer package: Edit the path to the WIX variable in InstallRoot_v4.1.bat
  • Execute InstallRoot_v4.1.bat: This will create InstallRoot_v4.1.msi
  • InstallRoot_v4.1.wxs may be modified using Notepad++ or your favorite text editor to customize your installer.

download-icon DOD Installer Source Download

Did you find this article useful? Why not share it with your friends?

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.