1 Accessing DoD Enterprise , AKO, and other DoD websites with Internet Explorer & Edge on your Windows computer Presented by: Michael J. Danberry Last Revision / review: 10 August 2016 Performing these fixes should fix most access problems. Personnel utilizing this guide without CACs should only skip the pages marked: This page is CAC Specific. CAC holders need to follow ALL slides. The most up to date version of this presentation can be found at: 1
2 To successfully access DoD websites, you MUST install the Department of Defense (DoD) certificates Download links and installation instructions for the InstallRoot file can be found on: https://militarycac.com/dodcerts.htm It will not harm your computer to run this file more than once If after installation of DoD certs you see There is a problem with this website s security certificate or see red certificate errors, follow this guide: https://militarycac.com/files/dodrootca2.pdf 2
3 Open Internet Explorer (IE) Make sure the page you are having problems accessing is NOT open in any tabs or another IE browser, Select Tools, or the gear You may also click the Alt & T keys on your computer keyboard Image from Internet Explorer 9, 10, & 11 3
4 Windows 10 users go to slide 5 4 Windows 8 / 8.1 users need to use the Internet Explorer from the Desktop taskbar (bottom of screen) NOT the one from the Start tiles
5 Select Internet Options after clicking the gear Windows 10 users [using Edge instead of IE] need to Right click the Windows logo in the lower left corner of screen, click Control Panel and select Internet Options (or Network and Internet, Internet Options). Now go to slide 7 to continue 5
6 You can also select Tools, Internet Options 6
7 Check the Delete browsing history on exit (box) (IE 11 users, See note below) and then click the Delete (button) NOTE: IE 11 users may have problems if you check this box. 7
8 Check the top 4 boxes, leave the rest unchecked, click Delete 8
9 Click Settings 9
10 Change this number to 50, click OK NOTE: This is my personal recommended size. Making it smaller will make your browser look for an updated page more often. The larger it is, the more web sites are being stored on your computer. 10
11 Click the Security (tab)(1), Trusted sites (green checkmark)(2), then Sites (button)(3)
12 Remove all websites that end in.mil from the Websites: box by clicking the listed website, selecting Remove, then clicking Close Exception: If you have an Oberthur 5.5 (or G&D FIPS 201) CAC on Windows 8.1 / 8 (NOT Windows 10 or 7), you may need to add websites to the zone (see Examples below - left). Examples for Oberthur 5.5 & G&D FIPS 201 CAC holders, type in, then click Add: https://*.mail.mil (Mail.mil) https://*.osd.mil (DTS) https://*.apps.mil (DCS) https://*.navy.mil (Navy sites) This is the Websites: box NOTE: Most Government owned computers will not let you access this area to make changes. NOTE2: Some people will argue that AKO should be in the trusted sites. Here s what I ve been able to deduce: it WAS needed with IE 6 & 7, however, if using: IE 8, 9, 10, or 11 you will be recycled to the AKO home page. So, IE 8, 9, 10, and 11 users REMOVE it. EXCEPT for Exception 12 above.
13 Click the Content (tab), Certificates (button) Click: Clear SSL state 13
14 Most people will only see 3 DOD certificates (2 with and 1 without) under the Personal (tab) Issued By (column). If you see more than 3, look at slide 23 for further instructions. Dual CAC holders will see a 4th certificate once their PIV is activated. This page is CAC Specific 14
15 Click the Intermediate Certification Authorities (tab). First, verify you have DOD CA-27 through DOD ID SW CA-48 under the Issued To (column) (if you don t, go back to slide #2 and install the DoD Root Certificates again). Second, scroll down to below the DOD ID SW CA-48 and look for any of the certificates in the Certificates image below and any shown in the blue box. IF you see any of these certificates, select it, and click Remove. If you don t see it, select Close on this window and continue with this guide Issued To Issued By Expiration Common Policy Entrust Entrust VeriSign Digital ID Certificate Common Policy Common Policy Entrust Date is Expired - Cross Cert remover Automated file (you may need to run as administrator) to remove certificates Listed above (same as slide 2): Download from MilitaryCAC (3 MAR 16 version) Download from DISA (3 MAR 16 version) Another way to remove the certificates utilizing certmgr.msc This guide can be used if the method above doesn t work for you. Information about the Cross Cert Remover 15
16 Click the Connections (tab)(1), LAN settings (button)(2), make sure none of the boxes are checked(3) (Personal Computers only), click OK
17 Click the Advanced (tab), scroll to the bottom of the list, make sure that only TLS 1.0, 1.1, & 1.2 (see NOTE2 below) are checked. SSL 2.0 & 3.0 are NOT checked NOTE: If you are receiving the error: Error 107 (net::err SSL PROTOCOL ERROR): SSL protocol error or Unknown error you might need to leave SSL 2 checked. Very rare now NOTE: Windows XP and Vista users will not see TLS 1.1 & 1.2, they are only seen on Windows 7 and above NOTE: Some computers refuse to leave TLS 1.0 checked and SSL 2.0 unchecked. If this happens, click the Reset (button). NOTE2: The Air Force AROWS, Navy NROWS, Army s MilSuite & ALMS Websites may need TLS 1.1 & 1.2 unchecked to be accessed. So, if you are having problems with some sites, uncheck these and try again. 17
18 When using Edge in Windows 10, select (More), then select Open with Internet Explorer More 18
19 Compatibility View is necessary when using IE to access some government websites like: OWA / Webmail, NKO, DTS, Army Reserve Citrix / RAP, ALMS, and others Look for the torn paper icon and click it (IE 10 only) Internet Explorer 11 users will not see the torn paper. You need to Click Tools (or Alt & T keys on your keyboard), Compatibility View Settings, and enter: army.mil, osd.mil, navy.mil, and apps.mil in the Add this website: box. Click Add, then Close The next slide shows images how to do this Further information regarding this issue can be read on Microsoft.com 19
20 Reasons to do this: The website worked before, but not now Internet Explorer 11 is your browser Add website to compatibility view An easy way to add the site is to go to the website then click Compatibility View settings. The correct website should be automatically inserted into the Add this website (box). DoD Enterprise may need mail.mil added -DTS may need osd.mil added -Army Reserve Remote Access Portal (Citrix), ALMS, and some other Army websites need army.mil added -DCS (DCO replacement) needs apps.mil added -Navy personnel need navy.mil added -Air Force AROWS need af.mil added army.mil Mail.mil osd.mil army.mil apps.mil navy.mil af.mil Internet Explorer 11 Compatibility View with Windows 7, 8, 8.1, and 10 20
21 If you are still having issues, uncheck "Enable Enhanced Protected Mode* This is sometimes needed to sign evaluations on EES (Army s OER / NCOER system). https://evaluations.hrc.army.mil More information available at https://militarycac.com/ees.htm To try this option, Click Tools, Internet Options, Advanced (tab) INFORMATION: Running Enhanced Protected Mode* helps prevent attackers from installing software or modifying system settings if they manage to run exploit code. It is an extra layer of protection that locks down parts of your system that your browser ordinarily doesn t need to use. - Unfortunately it blocks access and functionality to / on some DoD websites like HRC s EES. 21
22 If the previous adjustments did not work, select Reset at the bottom of the Advanced (tab), AND what you see on the next page 22
23 You may need to Remove your certificates (see slide 14 for instructions on how to get to this location). Dual persona personnel will have 4 certs after they have activated their PIV certificate. NOTE2: You will receive a message stating: You cannot decrypt data encrypted using the certificates. Select: Yes This page is CAC Specific NOTE: Removing certs and your CAC, then reinserting CAC is a way to test if your reader and middleware are working properly. 23
24 Your certificates should automatically be available to Windows when you remove and reinsert your CAC into the reader, however If you have ActivClient x installed.. You can double click the ActivClient icon (by your clock in the lower right corner of your screen) now go to slide 26 If you don t see it there: Windows Vista & 7 users can Click Start / Windows logo, All Programs, ActivIdentity, ActivClient, User Console. Now go to next slide Windows 7, 8 / 8.1, & 10 native users will not see an ActivClient icon, since you are not using it. This page is CAC Specific 24
25 Forget state for all cards in ActivClient x, this helps Dual CAC holders immediately after a PIV activation Click Tools, Advanced, Forget state for all cards (twice) DOE.JOHN.ANDREW s Make Certificates available to Windows... Forget state for all cards Go to next page to Make Certificates available to Windows This page is CAC Specific 25
26 How to make your certificates available to Windows when using ActivClient x Click Tools, Advanced, Make Certificates available to Windows DOE.JOHN.ANDREW s You should see this message This page is CAC Specific 26
27 Try these additional items if you are still having issues: Try using the 32 bit version of Internet Explorer (if you have 64 bit Windows) Please know that IE runs in 32 bit mode by default if you are using IE 10 or IE 11 in Windows 7, 8 / 8.1, & 10 NOTE: In some occasions, your time on your computer may be off by more than the server s 5 minute limit. Please check your clock and time zone. Try logging into a CAC enabled DoD website with your CAC, it should now work If all of the previous ideas did not work, please visit: https://militarycac.com/cacdrivers.htm to start troubleshooting your CAC reader 27
28 Presentation created and maintained by: Michael J. Danberry https://militarycac.com If you still have questions, visit: https://militarycac.com/questions.htm 28
Accessing DoD Enterprise Email, AKO, and other DoD websites with Internet Explorer & Edge (Windows 10) on your Windows computer Presented by: Michael J. Danberry Last Revision / review: 07 October 2015
Setting up Firefox (32 or 64 bit computers) or Waterfox (64 bit computers) to use your CAC on a Windows computer Presented by: Michael J. Danberry Last Revision / review: 07 October 2015 These tweaks are
AKO Email Shutdown Quick Reference Guide NETWORK ENTERPRISE CENTER This guide explains how the Army is shutting down AKO Email and outlines steps you must take to ensure a smooth transition to full DoD
MilitaryCAC's Information on the importance of DoD Certificates#316a https://militarycaccom/dodcertshtm Page 1 of 11 Search MilitaryCAC: Site Map Search com us ml mobi net org Please Also available at:
Use of Common Access Cards (CACs) from Home on Windows 7 without Middleware Problem: Microsoft Windows 7 includes a native capability to read and use the newest CACbased PKI certificates without installing
Tactics, Techniques, & Procedures (TTP) Dual Persona Personal Identity Verification (PIV) Authorization Certificate Version 3.0 23 Jan 2012 This document is not to be distributed or changed without express
Sub Rosa Pro for Android User Guide Copyright 2012-2016 Thursby Software Systems, Inc. Description 3 Download and Install 3 Licensing 3 Using Sub Rosa Pro 3 Sub Rosa Pro User Interface 5 1. Notifications
USA Performance Smartcard (PIV/CAC) Login Instructions Pre-requisites: 1. Your agency and organization must first be configured on the system to accept smartcard certificates. (Contact your agency s HR
HRC Advanced Citrix Troubleshooting Guide Advanced Troubleshooting procedures: 1. Add https://mobile.hrc.army.mil to Internet Explorer s trusted sites list. Click on Tools Internet Options Security. Click
Sub Rosa TM for ios User Guide Copyright 2012-2016 Thursby Software Systems, Inc. July 2016 Revision 26 Description 3 Installing and First Launch 3 Using Sub Rosa 4 Gestures 5 Sub Rosa User Interface 5
Optimal Browser Settings for Internet Explorer 10 Running on Microsoft Windows 8 Each time you log in to our web site, it evaluates whether you are using the same computer and browser you registered with
Optimal Browser Settings for Google Chrome Running on Microsoft Windows Each time you log in to our web site, it evaluates whether you are using the same computer and browser you registered with us. Our
CIT Table of Contents Introduction... 1 General Wireless Settings... 1 1. Windows XP Wireless Configuration... 2 2. Windows XP Intel Pro Wireless Tool... 7 3. Windows Vista Using the Windows Wireless Tools...
Citrix Web Client Installation and CAC Registration Guide Prepared By: Department of Defense Education Activity 1 Revision 1.1 To ensure a reasonably smooth process of establishing connectivity with the
Internet Explorer 10/11 Settings Cookies 1. To properly access Online Banking solutions you will need to enable first and thirdparty cookies. 2. Open your browser, click on TOOLS (also known as Gear icon).
Optimal Browser Settings for Internet Explorer Running on Microsoft Windows If you have Internet Explorer 7 or 8: Each time you log in to our web site, it evaluates whether you are using the same computer
How to Update your Information in the DoD Enterprise Email (DEE), Global Address List (GAL). Army users know it as Enterprise Email Presented by: Michael J. Danberry Last Revision / review: 21 November
CAC LOG-ON ENABLEMENT If you know your email address is correct on your CAC card and you know your PIN - Skip to step 5 otherwise start at Step 1. 1) Do you know your CAC PIN? If not, contact your nearest
Subject: Citrix Remote Access using PhoneFactor Authentication ATTENTION: End users should take note that Main Line Health has not verified within a Citrix environment the image quality of clinical cal
Passport installation Windows 7 + Internet Explorer 10 OS Version Windows 7 System Type 32 bit and 64 bit Browser & version Internet Explorer 10 Before you start Check you have Anti Virus software installed
Select Correct USB Driver Windows often installs updated drivers automatically, and defaults to this latest version. Not all of these drivers are compatible with our software. If you are experiencing communications
1 Accessing Your Site & User Access Last Updated February 27th, 2006 Now that your @work database is on our server, you ll want to begin setting up the system as soon as possible. However, before you access
Browser Settings for Optimal Use of the System for Award Management (SAM) 1 Browsers... 4 2 Browser Settings... 4 3 Browser Optimization... 4 Appendix A Instructions for Enabling TLS 1.0... 5 1 Firefox...
Internet Banking Recommended Choose Your Browser Below Internet Explorer Versions 10 and 11 Settings Cookies 1. To properly access Online Banking solutions you will need to enable first- and third-party
PD In Focus Users Frequently Asked Questions What roles are available in PD In Focus applications? Administration How do I manage custom channels? How do I create a custom channel? How do I manage members/licenses?
Passport Installation Windows 8 + Internet Explorer 10 OS Version Windows 8 System Type 32bit and 64bit Browser Name & version Internet Explorer 10 Before you begin Make sure you have Anti Virus software
Using Avaya IC tools to access agent applications on Citrix This document provides information for agents in contact centers about how to use the Avaya IC tools to access Avaya Agent and other Avaya IC
College of Charleston Modifying your Internet Explorer Security Settings Making Internet Explorer 11 work properly with Cognos Mary L. Person 9/28/2015 Introduction Cognos was created to work with Internet
Windows 7, Internet Explorer 8, and RE/Xplorer If you have a computer running Windows 7 and Internet Explorer 8, and you would like to configure it so RE/Xplorer will work properly, please follow these
Log in to Cisco ISE, page 1 Specify Proxy Settings in Cisco ISE, page 2 Ports Used by the Admin Portal, page 3 Specify System Time and NTP Server Settings, page 3 Change the System Time Zone, page 4 Configure
Page 1 RAPIDS Self Service User Guide https://www.dmdc.osd.mil/self_service Page 2 Introduction The RAPIDS Self Service (RSS) application provides sponsors with the capability to generate a DD Form 1172-2
Passport Installation Windows XP + Internet Explorer 8 OS Version Windows XP System Type 32bit or 64bit Browser & version Internet Explorer 8 Before you begin.. Make sure you have Anti Virus software installed
How to Setup the Remote Access Portal on a PC v1.0 1 P a g e Revision History: Name Date Reason Version Evan Miller April 13, 2016 Initial Version 1.0 CONTENTS System Requirements... 2 Installing Java...
Sierra College Wireless Network Troubleshooting Tips The following is a list of troubleshooting tips you can try if you re experiencing difficulties either connecting to or remaining connected to the Sierra
M S C o E Lifelong Learning Center BlackBoard Quick Start Guide Helpful Information & Configuring your Computer with Blackboard Help Desk Monday 0730-1630 Tuesday-Friday 0730-2230 Saturday 0900-1700 (CST)
Contents Automatic Setup... 1 Manual Setup... 2 Installing the Wireless Certificates... 18 Automatic Setup 1. Click on the Wireless icon in your system tray that looks like. 2. You will see a list of available
Follow the steps below to determine your Internet Explorer version number and access browser clean-up procedures specific to your version. 1. From Internet Explorer, click the Help menu and choose About
Windows User Manual Welcome to ncrypted Cloud!... 4 Getting Started 1.1... 5 Register for ncrypted Cloud... 5 Getting Started 1.2... 7 Download ncrypted Cloud... 7 Getting Started 1.3... 9 Access ncrypted
Digital Trends Software Installation Guide & User Manual for Google Chrome users Software version: 15.1 Effective date: 4 th May 2015 Table of contents Digital Trends Software... Error! Bookmark not defined.
Wireless for Windows 8 The new CWSL wireless network consists of three different wireless networks CWSL Faculty-Staff - This network is for faculty and staff only. (uses WPA2-Enterprise encryption) CWSL
5.0 10.3.1.6 Lab - Data Backup and Recovery in Windows XP Introduction Print and complete this lab. In this lab, you will back up data. You will also perform a recovery of the data. Recommended Equipment
GfK Digital Trends App Installation Guide & User Manual for Google Chrome users Software version: 14.3 Effective date: 4 th May 2015 Table of contents The GfK Digital Trends App... 1 System requirements...
BROWSER SETTINGS MASTER DOCUMENT Last updated: June 10, 2015 Table of Content General information... 2 Internet Explorer 10/11 Settings... 3 Internet Explorer 9 Settings... 5 Internet Explorer 8 Settings...
CITRIX TROUBLESHOOTING TIPS The purpose of this document is to outline the Most Common Frequently Asked Questions regarding access to the County of York Computer Systems via Citrix. SYSTEM REQUIREMENTS:
The Army Learning Management System (ALMS) Hint Guide Tips for Successfully Completing a Course on ALMS Version 1.0 March 2013 PURPOSE The purpose of this solution guide is to help students successfully
Navy Knowledge On-Line (NKO) User Registration Tutorial NKO Document #: 20090504-URT-NKO-V4.2 04 May 2009 Prepared for: NKO Program Management Office William R. Johnson NETPDTC N623 Table of Contents Table
How to Update your Information in the DoD Enterprise Email (EE) Army users know it as mail.mil Global Address List (GAL) Presented by: Michael J. Danberry Last Revision / review: 28 August 2013 This guide
TABLE OF CONTENTS Recommended Browsers for isupplier Portal Recommended Microsoft Internet Explorer Browser Settings (MSIE) Recommended Firefox Browser Settings Recommended Safari Browser Settings SYSTEM
Trusting the DoD and ECA PKIs: an explanation In order for Internet Explorer (and many other applications) to properly use certificates from the DoD s ECA PKI, you need to tell your computer to Trust the
How to Update your Information in the DoD Enterprise Email (DEE), Global Address List (GAL). Army users know it as Enterprise Email Presented by: Michael J. Danberry Last Revision / review: 04 June 2015
E N T E R P R I S E S E R V I C E S PA PROMISe Internet Explorer 10 Compatibility Guide Table of Contents 1 PROMISE PORTAL AND IE10... 1 1.1 PROMISE PORTAL AND INTERNET EXPLORER 10... 1 1.2 WINDOWS 8 USERS...
Citrix Client Installation A guide to installing and using the Citrix Client for applications hosted by the Maricopa County Education Service Agency. For MCESA Internal IVEE Users Installation of the Citrix
OMNIFORM TROUBLESHOOTING Opening an OmniForm with Windows XP SP2 The use of electronic forms allows candidates to utilize increasing technology more efficiently than using only paper documents. PDF documents
Financial Management Human Resources Campus Solutions Browser Recommendations, Browser Settings and Clearing the Cache Updates Date Action Page(s) 05/03/12 Created 5/08/12 Updated document to include Clearing
DMDC Learning Site DMDC LMS User Guide Department of Defense (DoD) Center Monterey Bay 400 Gigling Road Seaside, CA 93955-6671 http://www.dmdc.osd.mil Distributed by Defense Manpower Data Center DMDC Support
Overview Once the SupplyLogic server is installed, the SupplyLogic Client software can be used to install as many client computers as needed. Client computers can be any computer running Windows 7 or 8.
Instructions for the installation of electronic banking software and hardware ( - ActivClient 6.2) CONTENT INTRODUCTION... 1 INSTALLING THE ACTIVCLIENT 6.2 SOFTWARE... 2 REQUIRED SOFTWARE AND HARDWARE...
END USER S GUIDE VeriSign PKI Client Government Edition v 1.5 End User s Guide VeriSign PKI Client Government Version 1.5 Administrator s Guide VeriSign PKI Client VeriSign, Inc. Government Copyright 2010
Remote Access Services Microsoft Windows - Installation and Troubleshooting Guide Version 2.1 February 19, 2013 1 P age TABLE OF CONTENTS 1 MICROSOFT WINDOWS XP INSTALLATION PROCEDURES... 3 2 MICROSOFT
Browser/Windows Settings There are several Internet Explorer browser settings required for running reports in Cognos. This document will describe specifically how to set those in Internet Explorer 9 and
Using the myitlab Installation Wizard The myitlab Installation Wizard helps you set up your computer so you can access assignments and media components in your myitlab course. This document walks you through
Authorware Install Directions for IE in Windows Vista, Windows 7, and Windows 8 1. Read entire document before continuing. 2. Close all browser windows. There should be no websites open. If you are using
IT Quick Reference Guides Connecting to SU-Secure using Windows 8 Windows 8 Guides CONNECTING TO SU-SECURE WI-FI This document will give you instructions on how to connect your Windows 8 Computer to our
Symphony 3.4.1 PC Workflows Installation Instructions Updated August, 2013 Table of Contents Pre-installation Information 2 A. Minimum workstation requirements 2 B. Operating System Requirements 2 C. Setting
How to Borrow Library Books on the Nook Touch with your PC What you will need 1. Westlake Porter Public Library card number (located on the back of your library card, starts with PPPL, a total of 14 characters;
Portal Instructions for PC Table of Contents Introduction... 1 Preparing Internet Explorer... 2 Advanced Access Instructions... 2 Adding https://*.nyumc.org to the trusted sites... 2 Setting the Default
Having issues with Spectrum Health Connect? Please see below for solutions to common issues: How to log in to Spectrum Health Connect for the first time How to resolve SSL errors when launching applications
How To Configure The Security Settings In Internet Explorer 8? These instructions are for Internet Explorer version 8. If you are using version 7, Please use FAQ: How to configure the security settings
State of Florida VPN Client Installation Guide WARNING: Your System may automatically reboot after the install. Please save your work and close all programs. 1. Make sure that you have an active internet
Generating an Apple Push Notification Service Certificate for use with GO!Enterprise MDM This guide provides information on...... APNs Requirements Tips on Enrolling in the ios Developer Enterprise Program...
If you (or your PC!) is new to the FileBound v4 application, There are a few quick items that need to be addressed to ensure you will be able to access the image viewer section of the system. Minimum Requirements
Taskbar and Start Menu Options This area is used to make changes as to how items appear on the Taskbar or the Start Menu. Click the Start Button. Click Control Panel. The Control Panel window will display
Connecting to an ASU computer with Remote Desktop The ASU computer you wish to connect to must be configured to allow remote access and you must find out the computer name, the methods are different between
Frequently Asked Questions for logging in to Online Banking Why don t I recognize any of the phone numbers on the Secure Code page? I can t remember my password; can I reset it myself? I know I have the
Windows XP (SP2) preferred setup pre Axess install. November 2006 The following are instructions for Computer setup using Microsoft Windows XP Service Pack 2 Operating System before Axess is loaded. If
QUICK Source Microsoft Windows Vista Business Getting Started The Windows Vista Desktop Icon links to a program, file, or folder that is stored on the desktop. Shortcut Icon links to a program, file, or
Getting Started HitmanPro.Alert Getting Started 1.1 Page 1 1 Introduction HitmanPro.Alert is a solution that provides real-time protection for home and business PCs to guard against prevalent and zero-day
How to connect? I can't connect to the Internet? Why are certain web pages blocked? Connecting to Coach/Bus WIFI is easy. Turn on your device as usual. Click WIFI detector symbol. Click on Coach/Bus network.
Velocity@ocbc Clear Cache Guide Click here for Windows guide Click here for Mac OS guide Version 2.1 10122015 1 of 32 Step 1: Check your browser version 1. Type www.whatismybrowser.com at the address bar
Thank you for being a Dell Protected Workspace User. The following guide provides information about Protected Workspace and Windows 10. Currently, Dell Protected Workspace is not compatible with Windows
Installation instructions for PIV Card and VPN software and drivers for USB PIV Card reader hardware. This document will detail installing the software necessary to use the 2- factor VPN client on your
How to connect? I can't connect to the Internet? I can't send emails from the train? Why are certain web pages blocked? Connecting to Irish Rail Wifi is easy. Turn on your device as usual. Click Wifi detector