2. Obtain and verify a copy of the Federal Common Policy CA G2 certificate

To limit the impact to your agency, you should distribute the Federal Common Policy CA G2 (FCPCA G2) certificate to all affected government-furnished workstations and devices as a trusted root certificate as soon as possible.

Download a Copy of FCPCA G2

To download a copy of FCPCA G2, use one of these recommended options:

• Download the certificate from http://repo.fpki.gov/fcpca/fcpcag2.crt
• Email fpki-help@gsa.gov to request an out-of-band copy for download.

Verify Your Copy of FCPCA G2

To verify your copy of FCPCA G2, use one of these options:

On Windows: Use Microsoft Certutil

1. Click Start, type cmd, and press Enter.
2. Run the following command:
   

       certutil -hashfile {DOWNLOAD_LOCATION}\fcpcag2.crt SHA256
   

Note: The following .gif shows you how to verify your copy of FCPCA G2 on Microsoft Server 2016.

On macOS: Use Terminal

1. Click the Spotlight icon and search for Terminal.
2. Double-click the Terminal icon (black monitor icon with white “>_”) to open a window.
3. Run the following command:
   

    $ shasum -a 256 {DOWNLOAD_LOCATION}/fcpcag2.crt
   

Note: The following .gif shows you how to verify your copy of FCPCA G2 on macOS Catalina (10.15).

On Linux/Unix: Use the Command Line

1. Open the command line.
2. Run the following command:
   

    $ sha256sum {DOWNLOAD_LOCATION}/fcpcag2.crt
   

Next, distribute the Federal Common Policy CA G2 certificate as an operating system trusted root.