neededwin10s
win10s 时间:2021-02-22 阅读:(
)
AccessingDoDEnterpriseEmail,AKO,andotherDoDwebsiteswithInternetExplorer&EdgeonyourWindowscomputerPerformingthesefixes"should"fixmostaccessproblems.
LastRevision/review:11July2020Presentedby:MichaelJ.
DanberryPersonnelutilizingthisguidewithoutaCACshouldonlyskipthepagesmarked:"ThispageisCACSpecific.
"CACholdersneedtofollowALLslides.
Themostuptodateversionofthispresentationcanbefoundat:https://milcac.
us/tweaks***2ndtolastslidewillprovideinformationonmultiPINpromptsinOWA***TosuccessfullyaccessDepartmentofDefense(DoD)websites,youMUSTinstalltheDoDcertificatesDownloadlinksandinstallationinstructionsfortheInstallRootfilecanbefoundon:https://militarycac.
com/dodcerts.
htmIfafterinstallationoftheDoDcertsyousee"Thereisaproblemwiththiswebsite'ssecuritycertificate"oryouseeredcertificateerrors,followthisguide:https://militarycac.
com/files/dodrootca2.
pdfOpenInternetExplorer(IE)[MakesurethepageyouarehavingproblemsaccessingisNOTopeninanytabsoranotherIEbrowser],SelectthegearYoumayalsoclickthe"Alt&T"keysonyourcomputerkeyboardWindows8/8.
1usersneedtousetheInternetExplorerontheDesktoptaskbar(bottomofscreen)NOTtheonefromtheStarttilesWindows10usersgotoslide5SelectInternetOptionsafterclickingthe'gear'Windows10users[usingEdgeinsteadofIE]needtotype"InternetOptions"inthe"Typeheretosearch"boxandselectInternetOptionsControlPanel.
Youmaynowskiptoslide7tocontinueYoucanalsoselectTools,InternetOptionsWhenusingEdgeinWindows10,select…(SettingsandMore),thenOpenwithInternetExplorerMoreChecktheDeletebrowsinghistoryonexit(box),clickDelete…NOTE:"Afew"IE11usershaveexperiencedproblemswhencheckingthisbox.
Checkthetop4boxes,leavetherestunchecked,clickDeleteClickSettingsChangethisnumberto50,clickOKNOTE:Thisismypersonalrecommendedsize.
Makingitsmallerwillmakeyourbrowserlookforanupdatedpagemoreoften.
Thelargeritis,themorewebsitesarebeingstoredonyourcomputer.
ClicktheSecurity(tab)(1),Trustedsites(greencheckmark)(2),thenSites(button)(3)123Removeallwebsites*thatendin.
milfromtheWebsites:(box)byclickingthelistedwebsite,selectingRemove,thenclickingCloseNOTE2:SomepeoplewillarguethatAKO"shouldbe"inthetrustedsites.
Here'swhatI'vebeenabletodeduce:itWASneededwithIE6&7,however,ifusingIE11,AKOuserswillbe"recycled"totheAKOhomepage.
So,IE11usersREMOVEit.
ThisistheWebsites:boxNOTE:MostGovernmentownedcomputerswillnotletyoumakechangestothisarea.
Youronlyoptionistoskipthisstep.
*-NOTE3:Asof13APR17,ifyouneedtheabilitytosendandreceiveencryptedemailinOWA,you'llneedtoaddhttps://*.
mail.
mil,moreinformationcanbereadintheURLherehttps://milcac.
us/files/win10smime.
pdfthencomebacktothisguideClicktheContent(tab),Certificates(button)Click:ClearSSLstateMostpeoplewillsee3-4DODcertificates(2withEMAILand1-2without)underthePersonal(tab)IssuedBy(column).
Personnelwith2CACs[andeverynewCACissuedsince25FEB2018]willsee4certificatesontheircard.
ThispageisCACSpecificClicktheIntermediateCertificationAuthorities(tab).
First,verifyyouhaveDODEMAILCA-33throughDODSWCA-61undertheIssuedTo(column)(ifyoudon't,gobacktoslide#2andinstallorreruntheDoDRootCertificatesagain).
Second,scrolldowntobelowtheDODIDSWCA-48andlookforallofthelistedcertificatesonthenextpage.
-CrossCertremoverAutomatedfile(youmayneedtorunasadministrator)toremovecertificatesListedabove(Doesnotalwayswork)DownloadfromMilitaryCAC(24OCT19version)DownloadfromCyber.
mil(24OCT19version)InformationabouttheCrossCertRemoverAnotherwaytoremovethecertificatesutilizingcertmgr.
mscThisguidecanbeusedifthemethodabovedoesn'tworkforyou.
IFyouseeanyofthecertificatesshownonthenextslide,selectit,andclickRemove.
Thesearetheknown"badcerts"thatneedtoberemovedfromIntermediateCertificationAuthorities(tab)[iffound]:IssuedToIssuedByDoDInteroperabilityRootCA1SHA-1FederalRootCAG2DoDInteroperabilityRootCA2FederalBridgeCA2013DoDInteroperabilityRootCA2FederalBridgeCA2016DoDRootCA2DoDInteroperabilityRootCA1DoDRootCA3DoDInteroperabilityFederalBridgeCA2016or2013FederalCommonPolicyCAFederalBridgeCAG4orG6FederalCommonPolicySHA-1FederalRootCAG2FederalCommonPolicyUSDoDCCEBInteroperabilityRootCA1NOTE:Ifyoudon'tseeanyofthese,selectCloseonthiswindowandcontinuewiththisguideClicktheConnections(tab)(1),LANsettings(button)(2),makesurenoneoftheboxesarechecked(3)(PersonalComputersonly),clickOK132ClicktheAdvanced(tab),scrolltothebottomofthelist,makesurethatonlyTLS1.
0,1.
1,&1.
2arechecked.
TheSSL(s)shouldNOTbecheckedNOTE:Windows10userswillnotseeUseSSL2.
0NOTE:"Some"computersrefusetoleaveTLS1.
0checkedandSSL2.
0unchecked.
Ifthishappens,clicktheReset…(button).
AnotherNOTE:Ifyouaregettinganerrormessageregarding"Cannotconnectsecurelytothispage"tryUNCheckingUseTLS1.
0Ifyouarestillhavingissues,uncheck"EnableEnhancedProtectedMode*"ThisissometimesneededtosignevaluationsonEES(Army'sOER/NCOERsystem).
https://evaluations.
hrc.
army.
milMoreinformationavailableathttps://MilitaryCAC.
com/ees.
htmINFORMATION:RunningEnhancedProtectedMode*helpspreventattackersfrominstallingsoftwareormodifyingsystemsettingsiftheymanagetorunexploitcode.
Itisanextralayerofprotectionthatlocksdownpartsofyoursystemthatyourbrowserordinarilydoesn'tneedtouse.
-Unfortunatelyitblocksaccessandfunctionalityto/onsomeDoDwebsiteslikeHRC'sEES.
Totrythisoption,ClickTools,InternetOptions,Advanced(tab)Ifthepreviousadjustmentsdidnotwork,selectReset…atthebottomoftheAdvanced(tab),ANDwhatyouseeonthenextpageYoumayneedtoRemovecertificates(seeslides5&13forinstructionsonhowtogettothislocation).
Peoplewith2CACsmayseeupto8certsaftertheyhaveactivatedtheirPIVcertificates(4certspercard).
NOTE2:Youwillreceiveamessagestating:Youcannotdecryptdataencryptedusingthecertificates.
Select:YesThispageisCACSpecificNOTE:RemovingcertsandyourCAC,thenreinsertyourCACisawaytotestifyourreaderandmiddlewareareworkingproperly.
Yourcertificates"should"automaticallybeavailabletoWindowswhenyouremoveandreinsertyourCACintothereader,however…IfyouhaveActivClient6.
2.
0.
x(Windows7)installed.
.
YoucandoubleclicktheActivClienticon(byyourclockinthelowerrightcornerofyourscreen)nowgotoslide26Ifyoudon'tseeitthere:Windows7userscanClickStart/Windowslogo,AllPrograms,ActivIdentity,ActivClient,UserConsole.
NowgotonextslideWindows7,8/8.
1,&10nativeuserswillnotseeanActivClienticon,sinceyouarenotusingit.
ActivClient7.
0.
x.
x.
&7.
1.
x.
xdonothavethefunctionofmakingavailabletowindows,youronlyoptionistoremovethecardandreinsertit.
ThispageisCACSpecificResettingoptimizationcacheinActivClient7.
1.
0.
xClickTools,Advanced,ResetoptimizationcacheThispageisCACSpecificForgetstateforallcardsinActivClient6.
2.
0.
x,thishelpsDualCACholdersimmediatelyafteraPIVactivationClickTools,Advanced,Forgetstateforallcards(twice)DOE.
JOHN.
ANDREW.
1111111111'sThispageisCACSpecificGotonextpagetoMakeCertificatesavailabletoWindowsMakeCertificatesavailabletoWindows.
.
.
ForgetstateforallcardsHowtomakeyourcertificatesavailabletoWindowswhenusingActivClient6.
2.
0.
xClickTools,Advanced,MakeCertificatesavailabletoWindowsDOE.
JOHN.
ANDREW.
1111111111'sThispageisCACSpecificYoushouldseethismessageTrytheseadditionalitemsifyouarestillhavingissues:Yourtimeonyourcomputermaybeoffbymorethantheserver's5minuteallowedlimit.
Checkyourclockandtimezone.
Ifallofthepreviousideasdidnotwork,pleasevisit:https://militarycac.
com/cacdrivers.
htmtostarttroubleshootingyourCACreaderWhencheckingyouremailonWindows10,makesureyouareselectingthecorrectcertificate.
SelectMorechoicestoseeadditionalcertificate(s)ThispageisCACSpecificTherehavebeenDNSissuesforsomepeople,pleasetrytheideasbelowifstillhavingproblemsHere'showinWindowstomanuallyconfiguretheDNSsettings.
1.
RightclickonyourWireless/Ethernetconnection(downbyyourclock)2.
SelectOpenNetworkandSharingCenter3.
ClickChangeAdapterSettings4.
RightClickonyouractiveinternetconnection,selectProperties5.
UnderThisconnectionusesthefollowingitems:scrolldownandclickonInternetProtocolVersion4(TCP/IPv4),thenclickProperties6.
SelecttheoptionUsethefollowingDNSserveraddresses:.
ThisiswhereyoumanuallyconfigureyourDNSservers:NOTE:ItisuptoyouifyouwanttouseOpenDNS,Quad9,orCloudflare.
Youmighttryeachofthemseparately.
Quad9-enter9.
9.
9.
9forPreferredDNSserver,andleavealternateDNSserverblank.
ClickOK,thenclickCloseorCloudflare–enter1.
1.
1.
1forPreferredDNSserver,and1.
0.
0.
1forAlternateDNS,ClickOK,thenclickCloseTherehavebeenDNSissuesforsomepeople,pleasetrytheideasbelowifstillhavingproblemsHere'sHowonaMactomanuallyconfiguretheDNSsettings.
1.
ClickAppleicon->SystemPreferences,Network.
2.
Selectthenetworkconnectionserviceyouwanttouse(usuallyWi-FiorEthernet,unlessyounameditsomethingelse)inthelist,thenclicktheAdvanced(button).
3.
ClicktheDNS(tab),clickthe(+)atthebottomoftheDNSServerslist.
ThisiswhereyouwilladdDNSserverIPaddresses.
NOTE:ItisuptoyouifyouwanttouseOpenDNSorQuad9.
Youmighttryeachofthemseparately.
Quad9-enter9.
9.
9.
9andleavealternateDNSblankorCloudflare–enter1.
1.
1.
1and1.
0.
0.
14.
Whenyou'refinished,clickOK,thenclosetheopenwindowNeverEndingPINpromptswhenusingInternetExploreraccessingOWAWhatIknow:1.
IamreceivingemailsfrompeopleintheArmyaccessing@mail.
mil,AirForceaccessing@us.
af.
mil,Navyaccessing@navy.
mil,andMarinesaccessing@usmc.
mil2.
IamalsoreceivingemailsfrompeopleusingbothWindowsandMaccomputers.
3.
TheyareallreceivingmanyPINpromptswhenusingInternetExplorer(IE)onWindows,andSafarionMaccomputers.
WhatItappearstome:ExchangeserverswerepushedasecuritypatchinearlyOctober2019.
Whatyoucando:1.
Ifyoudoneedencryption,useGoogleChrome,ORbereadytoenteryourPINbetween6-24timesbetweenactions.
Ihopeyoudon'tblockyourCACintheprocess2.
OnaWindowscomputer,lookforKB4519338anduninstallit.
Youcanonlyholdyourupdatesforamaxof7days.
Thiswillblockallsecurityupdates,makingyourcomputerunsecure.
Therefore,Idonotrecommendedthisoption.
3.
Afewpeoplehavereportedthatoncetheirmail.
milaccountwasmigratedtotheAuthenticationcertificatefromtheEmailcertificate,theynolongerareexperiencingthisissue.
4.
Callyourrespectivehelpdesksandletthemknow.
https://milcac.
us/questions.
htmPresentationcreatedandmaintainedby:MichaelJ.
Danberryhttps://MilitaryCAC.
comhttps://MilitaryCAC.
org(DoDComputers)Ifyoustillhavequestions,visit:https://militarycac.
com/questions.
htmhttps://militarycac.
org/questions.
htm(DoDComputers)
想必我们有一些朋友应该陆续收到国内和国外的域名注册商关于域名即将涨价的信息。大概的意思是说从9月1日开始,.COM域名会涨价一点点,大约需要单个9.99美元左右一个。其实对于大部分用户来说也没多大的影响,毕竟如今什么都涨价,域名涨一点点也不要紧。如果是域名较多的话,确实增加续费成本和注册成本。今天整理看到Dynadot有发布新的八月份域名优惠活动,.COM首年注册依然是仅需48元,本次优惠活动截止...
百驰云成立于2017年,是一家新国人IDC商家,且正规持证IDC/ISP/CDN,商家主要提供数据中心基础服务、互联网业务解决方案,及专属服务器租用、云服务器、云虚拟主机、专属服务器托管、带宽租用等产品和服务。百驰云提供源自大陆、香港、韩国和美国等地骨干级机房优质资源,包括BGP国际多线网络,CN2点对点直连带宽以及国际顶尖品牌硬件。专注为个人开发者用户,中小型,大型企业用户提供一站式核心网络云端...
木木云怎么样?木木云品牌成立于18年,此为贵州木木云科技有限公司旗下新运营高端的服务器的平台,目前已上线美国中部大盘鸡,母鸡采用E5-267X系列,硬盘全部组成阵列。目前,木木云美国vps进行了优惠促销,1核1G/500M带宽/1T硬盘/4T流量,仅35元/月。点击进入:木木云官方网站地址木木云优惠码:提供了一个您专用的优惠码: yuntue目前我们有如下产品套餐:DV型 1H 1G 500M带宽...
win10s为你推荐
安装程序配置服务器失败安装用友T3出现安装程序配置服务器失败是怎么回事淘宝收费淘宝交易收取的费用是多少博客外链请问怎么利用博客做外链呢中国电信互联星空中国电信互联星空是什么!怎么取消快速美白好方法有什么好方法能快速美白?网站联盟怎样进入网站联盟直播加速手机上什么软件可以帮助直播加速,大神们推荐推荐qq怎么发邮件如何通过QQ发送邮件畅想中国未来的中国是什么样子的网络广告投放怎样在网络上进行广告的投放?
美国网站空间 郑州虚拟主机 深圳虚拟主机 安徽双线服务器租用 lamp安装 亚洲大于500m 香港vps99idc 外贸主机 ibox官网 华为网络硬盘 e蜗 域名转向 hinet 能外链的相册 常州联通宽带 七夕快乐英语 无限流量 个人免费邮箱 腾讯数据库 碳云 更多