Sign in with a CAC or PIV card
Certificate-based sign-in, what the browser and OS prompts mean, and how to recover from card errors.
All agency users
/pdcc/signin?step=AU03 Live walkthrough · Sign in with a CAC or PIV card
AU03 starts agency certificate authentication. Certificate selection and PIN entry happen in your browser, operating system or the agency provider — never in a PEEK text field.
- 1
Insert your card
Make sure the reader is connected before you start.
- 2
Choose CAC or PIV sign in
Your browser or OS shows its certificate picker.
- 3
Select the authentication certificate
Pick the certificate issued for authentication (not signing or encryption).
- 4
Enter your PIN
In the OS or middleware prompt.
- 5
Continue
The app validates the certificate identity and then runs the normal membership checks.
Card sign-in could not finish (AU04)
| Situation | What to do |
|---|---|
| No card detected | Reinsert the card, check the reader, then retry. |
| No eligible certificate | Your card has no authentication certificate this agency accepts — contact your card office. |
| Expired or revoked certificate | Renew the card; the app will not fall back silently. |
| PIN entry canceled | Retry and complete the PIN prompt. |
| Identity mismatch | The certificate does not match an approved agency identity — request an access review. |
Heads up — A specific reason is shown only when the provider reports it reliably. The app never silently downgrades you to a weaker method.