Symantec DOD Interoperability – ECA Certificates

Securely transact with the DoD online

Symantec is certified by the United States Department of Defense (DoD) as a provider of External Certification Authority (ECA) digital certificates for government contractors, state and local governments and employees of foreign governments. ECA certificates enable secure on-line transactions with DoD agencies, digitally signing documents, and encrypting e-mail communications.

ECA Certificate Overview

We are proud to partner with the DoD to offer a secure process to validate customer identities when communicating with the DoD. Our process, in compliance with DoD regulations, is as follows:

  1. Purchase certificate and/or hardware.
  2. Enroll for certificate.
  3. Coordinate with Trusted Agent/Notary to verify your customer identity.
  4. Install your certificate.
  5. Use the certificate and validate proper installation.

Because of the DoD verification process required, times to complete the process will vary depending on type of order and method to validate identity, and may take up to 3 weeks.

Learn about Trusted Agents

ECA Certificate Overview

ECA Certificate Purchasing

ECA certificates are sold as a set, including an Identity certificate and an Encryption certificate, and are used for activities such as authenticating identity for access to DoD websites, digitally signing documents and encrypting/signing email communication.

Who Can Purchase ECA Certificates

The following types of entities conducting business with U.S government agencies:

  • Employees of organizations.
  • Employees of state and local governments.
  • Employees of foreign governments or organizations.
  • Individuals who need to communicate securely.

Medium Assurance versus Medium Token Hardware Assurance Explained

Certificates can be installed on either a web browser or hardware device (token or smart card). Once installed, they can be used with an email program e.g. Outlook.

For bulk pricing and more information on bulk certificate management, please contact our sales team at 866 202 5570 option 3 OR

Learn More

ECA Certificate Purchasing

ECA Certificate Enrollment

If you have a Trusted Agent, request their help before beginning your enrollment.

If you do not have a Trusted Agent there are 5 easy steps to acquiring the ECA Certificate pair.

Before you begin check the support matrix to verify that you can successfully enroll and install the Symantec ECA Certificates with your operating system and Web browser.

  1. Purchase the ECA Certificate
  2. Enroll for the ECA Certificates
  3. Symantec will validate your identity and issue the ECA Certificates.
  4. Install the ECA Certificates
  5. Verify the ECA installation and associate it with the DoD website you wish to access.

Get step by step instructions to enroll and install your ECA Certificates.

Helpful reference links:

Learn More

ECA Certificate Enrollment
Completing the Certificate Chain

Completing the Certificate Chain

The personal ECA Identity certificate is one of three certificates the DoD will validate against when a user attempts to connect to their site. These three certificates make up a ‘certificate chain’ that must be intact for the ECA certificate to be validated.

The ECA Root and Intermediate Certificates need to be downloaded and installed prior to picking up ECA certificate, before or after enrollment. Please follow the complete instructions to download and install the ECA Root and Intermediate Certificates.

Additional Information

Symantec ECA roots will enable you to read messages encrypted or signed with a certificate issued by the Symantec ECA Root CA.

U.S. Government roots will enable you to read messages encrypted or signed with a certificate issued by the U.S. Government DoD PKI Root CA.

ECA Certificate Management and Support

Renew your ECA Certificates

To ensure uninterrupted security and access, ECA Certificates should be renewed before they expire. Please follow the link to learn about our pre-renewal check list and to validate computer settings to ensure a successful certificate renewal process.

Revoke and replace (re-enroll for) your ECA Certificates

In the event that you think your certificate was compromised or is no longer accessible (lost or broken computer) you will need to revoke your current valid certificates and replace those certificates.

Search for your ECA Certificates

A quick search tool to verify the status of your Certificates and where in a Certificate process you are.

ECA Certificate Management and Support

Tools for ECA Certificates

Verification of your ECA Certificates after Installation

How to verify your ECA Certificate installation and a brief tutorial on how to access the DoD websites with your valid ECA Certificate.

How to Export/Backup your Certificates

Symantec recommends that you backup your certificates in case your computer fails. There are situations where you may want to use the certificates on another computer as well, and this page can help you with all situations where you need to move the certificates.

How to use your Certificates with Email Clients

The Symantec ECA Certificates can help protect your correspondence by validating who you are with email recipients and encrypting the contents of your messages allowing those contents to be viewed by only those you approve.

Tools for ECA Certificates

Request the Recovery of a Private Key

In the event that you lose your ECA Encryption Certificate Private Key, Symantec offers the following options to recovery it. It should be noted that there is a fee associated with recovering your key.

Request the Recovery of a Private Key

More about External Certificate Authority (ECA) Certificates


Additional data sheets, white papers, webcasts, videos and more

Learn More

System Requirements

See detailed information about installation, environment and other system requirements

Learn More


Get the latest pricing information

Learn More


Returning Users Renew Revoke Manage