neededwin10s

win10s  时间:2021-02-22  阅读:()
AccessingDoDEnterpriseEmail,AKO,andotherDoDwebsiteswithInternetExplorer&EdgeonyourWindowscomputerPerformingthesefixes"should"fixmostaccessproblems.
LastRevision/review:11July2020Presentedby:MichaelJ.
DanberryPersonnelutilizingthisguidewithoutaCACshouldonlyskipthepagesmarked:"ThispageisCACSpecific.
"CACholdersneedtofollowALLslides.
Themostuptodateversionofthispresentationcanbefoundat:https://milcac.
us/tweaks***2ndtolastslidewillprovideinformationonmultiPINpromptsinOWA***TosuccessfullyaccessDepartmentofDefense(DoD)websites,youMUSTinstalltheDoDcertificatesDownloadlinksandinstallationinstructionsfortheInstallRootfilecanbefoundon:https://militarycac.
com/dodcerts.
htmIfafterinstallationoftheDoDcertsyousee"Thereisaproblemwiththiswebsite'ssecuritycertificate"oryouseeredcertificateerrors,followthisguide:https://militarycac.
com/files/dodrootca2.
pdfOpenInternetExplorer(IE)[MakesurethepageyouarehavingproblemsaccessingisNOTopeninanytabsoranotherIEbrowser],SelectthegearYoumayalsoclickthe"Alt&T"keysonyourcomputerkeyboardWindows8/8.
1usersneedtousetheInternetExplorerontheDesktoptaskbar(bottomofscreen)NOTtheonefromtheStarttilesWindows10usersgotoslide5SelectInternetOptionsafterclickingthe'gear'Windows10users[usingEdgeinsteadofIE]needtotype"InternetOptions"inthe"Typeheretosearch"boxandselectInternetOptionsControlPanel.
Youmaynowskiptoslide7tocontinueYoucanalsoselectTools,InternetOptionsWhenusingEdgeinWindows10,select…(SettingsandMore),thenOpenwithInternetExplorerMoreChecktheDeletebrowsinghistoryonexit(box),clickDelete…NOTE:"Afew"IE11usershaveexperiencedproblemswhencheckingthisbox.
Checkthetop4boxes,leavetherestunchecked,clickDeleteClickSettingsChangethisnumberto50,clickOKNOTE:Thisismypersonalrecommendedsize.
Makingitsmallerwillmakeyourbrowserlookforanupdatedpagemoreoften.
Thelargeritis,themorewebsitesarebeingstoredonyourcomputer.
ClicktheSecurity(tab)(1),Trustedsites(greencheckmark)(2),thenSites(button)(3)123Removeallwebsites*thatendin.
milfromtheWebsites:(box)byclickingthelistedwebsite,selectingRemove,thenclickingCloseNOTE2:SomepeoplewillarguethatAKO"shouldbe"inthetrustedsites.
Here'swhatI'vebeenabletodeduce:itWASneededwithIE6&7,however,ifusingIE11,AKOuserswillbe"recycled"totheAKOhomepage.
So,IE11usersREMOVEit.
ThisistheWebsites:boxNOTE:MostGovernmentownedcomputerswillnotletyoumakechangestothisarea.
Youronlyoptionistoskipthisstep.
*-NOTE3:Asof13APR17,ifyouneedtheabilitytosendandreceiveencryptedemailinOWA,you'llneedtoaddhttps://*.
mail.
mil,moreinformationcanbereadintheURLherehttps://milcac.
us/files/win10smime.
pdfthencomebacktothisguideClicktheContent(tab),Certificates(button)Click:ClearSSLstateMostpeoplewillsee3-4DODcertificates(2withEMAILand1-2without)underthePersonal(tab)IssuedBy(column).
Personnelwith2CACs[andeverynewCACissuedsince25FEB2018]willsee4certificatesontheircard.
ThispageisCACSpecificClicktheIntermediateCertificationAuthorities(tab).
First,verifyyouhaveDODEMAILCA-33throughDODSWCA-61undertheIssuedTo(column)(ifyoudon't,gobacktoslide#2andinstallorreruntheDoDRootCertificatesagain).
Second,scrolldowntobelowtheDODIDSWCA-48andlookforallofthelistedcertificatesonthenextpage.
-CrossCertremoverAutomatedfile(youmayneedtorunasadministrator)toremovecertificatesListedabove(Doesnotalwayswork)DownloadfromMilitaryCAC(24OCT19version)DownloadfromCyber.
mil(24OCT19version)InformationabouttheCrossCertRemoverAnotherwaytoremovethecertificatesutilizingcertmgr.
mscThisguidecanbeusedifthemethodabovedoesn'tworkforyou.
IFyouseeanyofthecertificatesshownonthenextslide,selectit,andclickRemove.
Thesearetheknown"badcerts"thatneedtoberemovedfromIntermediateCertificationAuthorities(tab)[iffound]:IssuedToIssuedByDoDInteroperabilityRootCA1SHA-1FederalRootCAG2DoDInteroperabilityRootCA2FederalBridgeCA2013DoDInteroperabilityRootCA2FederalBridgeCA2016DoDRootCA2DoDInteroperabilityRootCA1DoDRootCA3DoDInteroperabilityFederalBridgeCA2016or2013FederalCommonPolicyCAFederalBridgeCAG4orG6FederalCommonPolicySHA-1FederalRootCAG2FederalCommonPolicyUSDoDCCEBInteroperabilityRootCA1NOTE:Ifyoudon'tseeanyofthese,selectCloseonthiswindowandcontinuewiththisguideClicktheConnections(tab)(1),LANsettings(button)(2),makesurenoneoftheboxesarechecked(3)(PersonalComputersonly),clickOK132ClicktheAdvanced(tab),scrolltothebottomofthelist,makesurethatonlyTLS1.
0,1.
1,&1.
2arechecked.
TheSSL(s)shouldNOTbecheckedNOTE:Windows10userswillnotseeUseSSL2.
0NOTE:"Some"computersrefusetoleaveTLS1.
0checkedandSSL2.
0unchecked.
Ifthishappens,clicktheReset…(button).
AnotherNOTE:Ifyouaregettinganerrormessageregarding"Cannotconnectsecurelytothispage"tryUNCheckingUseTLS1.
0Ifyouarestillhavingissues,uncheck"EnableEnhancedProtectedMode*"ThisissometimesneededtosignevaluationsonEES(Army'sOER/NCOERsystem).
https://evaluations.
hrc.
army.
milMoreinformationavailableathttps://MilitaryCAC.
com/ees.
htmINFORMATION:RunningEnhancedProtectedMode*helpspreventattackersfrominstallingsoftwareormodifyingsystemsettingsiftheymanagetorunexploitcode.
Itisanextralayerofprotectionthatlocksdownpartsofyoursystemthatyourbrowserordinarilydoesn'tneedtouse.
-Unfortunatelyitblocksaccessandfunctionalityto/onsomeDoDwebsiteslikeHRC'sEES.
Totrythisoption,ClickTools,InternetOptions,Advanced(tab)Ifthepreviousadjustmentsdidnotwork,selectReset…atthebottomoftheAdvanced(tab),ANDwhatyouseeonthenextpageYoumayneedtoRemovecertificates(seeslides5&13forinstructionsonhowtogettothislocation).
Peoplewith2CACsmayseeupto8certsaftertheyhaveactivatedtheirPIVcertificates(4certspercard).
NOTE2:Youwillreceiveamessagestating:Youcannotdecryptdataencryptedusingthecertificates.
Select:YesThispageisCACSpecificNOTE:RemovingcertsandyourCAC,thenreinsertyourCACisawaytotestifyourreaderandmiddlewareareworkingproperly.
Yourcertificates"should"automaticallybeavailabletoWindowswhenyouremoveandreinsertyourCACintothereader,however…IfyouhaveActivClient6.
2.
0.
x(Windows7)installed.
.
YoucandoubleclicktheActivClienticon(byyourclockinthelowerrightcornerofyourscreen)nowgotoslide26Ifyoudon'tseeitthere:Windows7userscanClickStart/Windowslogo,AllPrograms,ActivIdentity,ActivClient,UserConsole.
NowgotonextslideWindows7,8/8.
1,&10nativeuserswillnotseeanActivClienticon,sinceyouarenotusingit.
ActivClient7.
0.
x.
x.
&7.
1.
x.
xdonothavethefunctionofmakingavailabletowindows,youronlyoptionistoremovethecardandreinsertit.
ThispageisCACSpecificResettingoptimizationcacheinActivClient7.
1.
0.
xClickTools,Advanced,ResetoptimizationcacheThispageisCACSpecificForgetstateforallcardsinActivClient6.
2.
0.
x,thishelpsDualCACholdersimmediatelyafteraPIVactivationClickTools,Advanced,Forgetstateforallcards(twice)DOE.
JOHN.
ANDREW.
1111111111'sThispageisCACSpecificGotonextpagetoMakeCertificatesavailabletoWindowsMakeCertificatesavailabletoWindows.
.
.
ForgetstateforallcardsHowtomakeyourcertificatesavailabletoWindowswhenusingActivClient6.
2.
0.
xClickTools,Advanced,MakeCertificatesavailabletoWindowsDOE.
JOHN.
ANDREW.
1111111111'sThispageisCACSpecificYoushouldseethismessageTrytheseadditionalitemsifyouarestillhavingissues:Yourtimeonyourcomputermaybeoffbymorethantheserver's5minuteallowedlimit.
Checkyourclockandtimezone.
Ifallofthepreviousideasdidnotwork,pleasevisit:https://militarycac.
com/cacdrivers.
htmtostarttroubleshootingyourCACreaderWhencheckingyouremailonWindows10,makesureyouareselectingthecorrectcertificate.
SelectMorechoicestoseeadditionalcertificate(s)ThispageisCACSpecificTherehavebeenDNSissuesforsomepeople,pleasetrytheideasbelowifstillhavingproblemsHere'showinWindowstomanuallyconfiguretheDNSsettings.
1.
RightclickonyourWireless/Ethernetconnection(downbyyourclock)2.
SelectOpenNetworkandSharingCenter3.
ClickChangeAdapterSettings4.
RightClickonyouractiveinternetconnection,selectProperties5.
UnderThisconnectionusesthefollowingitems:scrolldownandclickonInternetProtocolVersion4(TCP/IPv4),thenclickProperties6.
SelecttheoptionUsethefollowingDNSserveraddresses:.
ThisiswhereyoumanuallyconfigureyourDNSservers:NOTE:ItisuptoyouifyouwanttouseOpenDNS,Quad9,orCloudflare.
Youmighttryeachofthemseparately.
Quad9-enter9.
9.
9.
9forPreferredDNSserver,andleavealternateDNSserverblank.
ClickOK,thenclickCloseorCloudflare–enter1.
1.
1.
1forPreferredDNSserver,and1.
0.
0.
1forAlternateDNS,ClickOK,thenclickCloseTherehavebeenDNSissuesforsomepeople,pleasetrytheideasbelowifstillhavingproblemsHere'sHowonaMactomanuallyconfiguretheDNSsettings.
1.
ClickAppleicon->SystemPreferences,Network.
2.
Selectthenetworkconnectionserviceyouwanttouse(usuallyWi-FiorEthernet,unlessyounameditsomethingelse)inthelist,thenclicktheAdvanced(button).
3.
ClicktheDNS(tab),clickthe(+)atthebottomoftheDNSServerslist.
ThisiswhereyouwilladdDNSserverIPaddresses.
NOTE:ItisuptoyouifyouwanttouseOpenDNSorQuad9.
Youmighttryeachofthemseparately.
Quad9-enter9.
9.
9.
9andleavealternateDNSblankorCloudflare–enter1.
1.
1.
1and1.
0.
0.
14.
Whenyou'refinished,clickOK,thenclosetheopenwindowNeverEndingPINpromptswhenusingInternetExploreraccessingOWAWhatIknow:1.
IamreceivingemailsfrompeopleintheArmyaccessing@mail.
mil,AirForceaccessing@us.
af.
mil,Navyaccessing@navy.
mil,andMarinesaccessing@usmc.
mil2.
IamalsoreceivingemailsfrompeopleusingbothWindowsandMaccomputers.
3.
TheyareallreceivingmanyPINpromptswhenusingInternetExplorer(IE)onWindows,andSafarionMaccomputers.
WhatItappearstome:ExchangeserverswerepushedasecuritypatchinearlyOctober2019.
Whatyoucando:1.
Ifyoudoneedencryption,useGoogleChrome,ORbereadytoenteryourPINbetween6-24timesbetweenactions.
Ihopeyoudon'tblockyourCACintheprocess2.
OnaWindowscomputer,lookforKB4519338anduninstallit.
Youcanonlyholdyourupdatesforamaxof7days.
Thiswillblockallsecurityupdates,makingyourcomputerunsecure.
Therefore,Idonotrecommendedthisoption.
3.
Afewpeoplehavereportedthatoncetheirmail.
milaccountwasmigratedtotheAuthenticationcertificatefromtheEmailcertificate,theynolongerareexperiencingthisissue.
4.
Callyourrespectivehelpdesksandletthemknow.
https://milcac.
us/questions.
htmPresentationcreatedandmaintainedby:MichaelJ.
Danberryhttps://MilitaryCAC.
comhttps://MilitaryCAC.
org(DoDComputers)Ifyoustillhavequestions,visit:https://militarycac.
com/questions.
htmhttps://militarycac.
org/questions.
htm(DoDComputers)

vpsdime:VPS内存/2核/VPS,4G内存/2核/50gSSD/2T流量/达拉斯机房达拉斯机房,新产品系列-Windows VPS

vpsdime上了新产品系列-Windows VPS,配置依旧很高但是价格依旧是走低端线路。或许vpsdime的母公司Nodisto IT想把核心产品集中到vpsdime上吧,当然这只是站长个人的猜测,毕竟winity.io也是专业卖Windows vps的,而且也是他们自己的品牌。vpsdime是一家新上来不久的奇葩VPS提供商,实际是和backupspy以及crowncloud等都是同一家公司...

HostKvm - 夏季云服务器七折优惠 香港和韩国机房月付5.95美元起

HostKvm,我们很多人都算是比较熟悉的国人服务商,旗下也有多个品牌,差异化多占位策略营销的,商家是一个创建于2013年的品牌,有提供中国香港、美国、日本、新加坡区域虚拟化服务器业务,所有业务均对中国大陆地区线路优化,已经如果做海外线路的话,竞争力不够。今天有看到HostKvm夏季优惠发布,主要针对香港国际和韩国VPS提供7折优惠,折后最低月付5.95美元,其他机房VPS依然是全场8折。第一、夏...

酷番云-618云上秒杀,香港1核2M 29/月,高防服务器20M 147/月 50M 450/月,续费同价!

官方网站:点击访问酷番云官网活动方案:优惠方案一(限时秒杀专场)有需要海外的可以看看,比较划算29月,建议年付划算,月付续费不同价,这个专区。国内节点可以看看,性能高IO为主, 比较少见。平常一般就100IO 左右。优惠方案二(高防专场)高防专区主要以高防为主,节点有宿迁,绍兴,成都,宁波等,节点挺多,都支持防火墙自助控制。续费同价以下专场。 优惠方案三(精选物理机)西南地区节点比较划算,赠送5...

win10s为你推荐
fontfamilyfont-family:ms shell dlg是什么意思?安装程序配置服务器失败安装用友T3出现安装程序配置服务器失败是怎么回事博客外链博客和博客之间怎么建超级链接吴晓波频道买粉《吴晓波频道》《罗辑思维》《专栏精粹》怎么评价?手机区号手机号码前怎样填写正确的国内区号?申请证书一、如何申请证书?硬盘人500G的硬盘容量是多少啊?雅虎天盾高手进来看看我该怎么办 新装的ie8 内存使用率达到100%了bluestackbluestacks安卓模拟器有什么用虚拟专用网虚拟专用网适用于什么行业
太原域名注册 绍兴服务器租用 谷歌域名邮箱 美国主机排名 bluevm 视频存储服务器 缓存服务器 私有云存储 嘉洲服务器 圣诞促销 佛山高防服务器 中国电信测速网 免费申请网站 空间技术网 如何注册阿里云邮箱 申请免费空间和域名 iki lamp是什么意思 cdn网站加速 群英网络 更多