Skip to main content

Manual CAC Registration

Overview​

Covers manually registering a new Tactical ID account using your Common Access Card (CAC) identifiers, for cases where a CAC reader / automated enrollment station isn't available. This is the "CAC Manual" path off the IdentityHub login screen, not the physical-card-swipe enrollment flow.

Prerequisites​

  • Your DOD UPN: a 16-digit number formatted 1234567890111111@mil. The first 10 digits are your EDIPI (from the rear of your CAC), the next 6 are your FASCN code.
    • Windows: retrieve via certutil -scinfo
    • Mac: pkcs11-tool --list-objects or opensc-tool
    • Browser: visit https://mtls-id-platform.mchmr.ai/ and view the certificate details
  • Your full name and DoD email address (first.last@branch.mil)
  • Knowledge of which applications you need access to (see Available Applications)
  • Your unit, for the unit selection dropdown

Steps​

  1. Go to https://auth.mchmr.ai.
  2. On the login screen, scroll to the bottom and click "Trouble with CAC Registration? - Click Here".

Tactical ID login screen — click "Trouble with CAC Registration? - Click Here" to start this flow

  1. This opens New User Registration - CAC Manual (/if/flow/new-user-registration-cac-manual/).
  2. Enter your DOD UPN in the format above.
  3. Enter your Name (first and last).
  4. Enter your DoD Email Address (first.last@branch.mil).
  5. Check the boxes for any Application Requests you need (Compass, Filecloud, Lattice, Rocketchat, Rune, Somewear, TAK, Watchtower). See Available Applications for what each one is for.
  6. If you checked TAK, optionally fill in Callsign, TAK Team Color, and TAK Role.
  7. Use Unit Selection to search and pick your unit from the org tree (e.g. AFCENT Battle Lab, Task Force 99, SOCOM, etc.).

New User Registration - CAC Manual form — DOD UPN, name, email, app requests, unit selection

  1. Click Continue.
  2. Set a password in Password and Password (repeat), then click Continue.
    • If you see "Password is too weak," add another word or two — uncommon words score better than substituting numbers/symbols into a short word.
  3. On success you'll see Enrollment Complete — your account is created but pending administrator approval. You'll be notified once an admin activates it. You can close the window at this point.

Troubleshooting​

  • "Password is too weak": the strength checker wants length and unpredictability over complexity rules — add words rather than swapping in symbols.
  • Can't find your DOD UPN: double check you're reading both the EDIPI (front number set) and FASCN (trailing digits) off the CAC — see the retrieval tips under Prerequisites.
  • Account stuck pending: approval is manual on the admin side — contact your Apex Edge administrator.