neededwin10s
win10s 时间:2021-02-22 阅读:(
)
AccessingDoDEnterpriseEmail,AKO,andotherDoDwebsiteswithInternetExplorer&EdgeonyourWindowscomputerPerformingthesefixes"should"fixmostaccessproblems.
LastRevision/review:11July2020Presentedby:MichaelJ.
DanberryPersonnelutilizingthisguidewithoutaCACshouldonlyskipthepagesmarked:"ThispageisCACSpecific.
"CACholdersneedtofollowALLslides.
Themostuptodateversionofthispresentationcanbefoundat:https://milcac.
us/tweaks***2ndtolastslidewillprovideinformationonmultiPINpromptsinOWA***TosuccessfullyaccessDepartmentofDefense(DoD)websites,youMUSTinstalltheDoDcertificatesDownloadlinksandinstallationinstructionsfortheInstallRootfilecanbefoundon:https://militarycac.
com/dodcerts.
htmIfafterinstallationoftheDoDcertsyousee"Thereisaproblemwiththiswebsite'ssecuritycertificate"oryouseeredcertificateerrors,followthisguide:https://militarycac.
com/files/dodrootca2.
pdfOpenInternetExplorer(IE)[MakesurethepageyouarehavingproblemsaccessingisNOTopeninanytabsoranotherIEbrowser],SelectthegearYoumayalsoclickthe"Alt&T"keysonyourcomputerkeyboardWindows8/8.
1usersneedtousetheInternetExplorerontheDesktoptaskbar(bottomofscreen)NOTtheonefromtheStarttilesWindows10usersgotoslide5SelectInternetOptionsafterclickingthe'gear'Windows10users[usingEdgeinsteadofIE]needtotype"InternetOptions"inthe"Typeheretosearch"boxandselectInternetOptionsControlPanel.
Youmaynowskiptoslide7tocontinueYoucanalsoselectTools,InternetOptionsWhenusingEdgeinWindows10,select…(SettingsandMore),thenOpenwithInternetExplorerMoreChecktheDeletebrowsinghistoryonexit(box),clickDelete…NOTE:"Afew"IE11usershaveexperiencedproblemswhencheckingthisbox.
Checkthetop4boxes,leavetherestunchecked,clickDeleteClickSettingsChangethisnumberto50,clickOKNOTE:Thisismypersonalrecommendedsize.
Makingitsmallerwillmakeyourbrowserlookforanupdatedpagemoreoften.
Thelargeritis,themorewebsitesarebeingstoredonyourcomputer.
ClicktheSecurity(tab)(1),Trustedsites(greencheckmark)(2),thenSites(button)(3)123Removeallwebsites*thatendin.
milfromtheWebsites:(box)byclickingthelistedwebsite,selectingRemove,thenclickingCloseNOTE2:SomepeoplewillarguethatAKO"shouldbe"inthetrustedsites.
Here'swhatI'vebeenabletodeduce:itWASneededwithIE6&7,however,ifusingIE11,AKOuserswillbe"recycled"totheAKOhomepage.
So,IE11usersREMOVEit.
ThisistheWebsites:boxNOTE:MostGovernmentownedcomputerswillnotletyoumakechangestothisarea.
Youronlyoptionistoskipthisstep.
*-NOTE3:Asof13APR17,ifyouneedtheabilitytosendandreceiveencryptedemailinOWA,you'llneedtoaddhttps://*.
mail.
mil,moreinformationcanbereadintheURLherehttps://milcac.
us/files/win10smime.
pdfthencomebacktothisguideClicktheContent(tab),Certificates(button)Click:ClearSSLstateMostpeoplewillsee3-4DODcertificates(2withEMAILand1-2without)underthePersonal(tab)IssuedBy(column).
Personnelwith2CACs[andeverynewCACissuedsince25FEB2018]willsee4certificatesontheircard.
ThispageisCACSpecificClicktheIntermediateCertificationAuthorities(tab).
First,verifyyouhaveDODEMAILCA-33throughDODSWCA-61undertheIssuedTo(column)(ifyoudon't,gobacktoslide#2andinstallorreruntheDoDRootCertificatesagain).
Second,scrolldowntobelowtheDODIDSWCA-48andlookforallofthelistedcertificatesonthenextpage.
-CrossCertremoverAutomatedfile(youmayneedtorunasadministrator)toremovecertificatesListedabove(Doesnotalwayswork)DownloadfromMilitaryCAC(24OCT19version)DownloadfromCyber.
mil(24OCT19version)InformationabouttheCrossCertRemoverAnotherwaytoremovethecertificatesutilizingcertmgr.
mscThisguidecanbeusedifthemethodabovedoesn'tworkforyou.
IFyouseeanyofthecertificatesshownonthenextslide,selectit,andclickRemove.
Thesearetheknown"badcerts"thatneedtoberemovedfromIntermediateCertificationAuthorities(tab)[iffound]:IssuedToIssuedByDoDInteroperabilityRootCA1SHA-1FederalRootCAG2DoDInteroperabilityRootCA2FederalBridgeCA2013DoDInteroperabilityRootCA2FederalBridgeCA2016DoDRootCA2DoDInteroperabilityRootCA1DoDRootCA3DoDInteroperabilityFederalBridgeCA2016or2013FederalCommonPolicyCAFederalBridgeCAG4orG6FederalCommonPolicySHA-1FederalRootCAG2FederalCommonPolicyUSDoDCCEBInteroperabilityRootCA1NOTE:Ifyoudon'tseeanyofthese,selectCloseonthiswindowandcontinuewiththisguideClicktheConnections(tab)(1),LANsettings(button)(2),makesurenoneoftheboxesarechecked(3)(PersonalComputersonly),clickOK132ClicktheAdvanced(tab),scrolltothebottomofthelist,makesurethatonlyTLS1.
0,1.
1,&1.
2arechecked.
TheSSL(s)shouldNOTbecheckedNOTE:Windows10userswillnotseeUseSSL2.
0NOTE:"Some"computersrefusetoleaveTLS1.
0checkedandSSL2.
0unchecked.
Ifthishappens,clicktheReset…(button).
AnotherNOTE:Ifyouaregettinganerrormessageregarding"Cannotconnectsecurelytothispage"tryUNCheckingUseTLS1.
0Ifyouarestillhavingissues,uncheck"EnableEnhancedProtectedMode*"ThisissometimesneededtosignevaluationsonEES(Army'sOER/NCOERsystem).
https://evaluations.
hrc.
army.
milMoreinformationavailableathttps://MilitaryCAC.
com/ees.
htmINFORMATION:RunningEnhancedProtectedMode*helpspreventattackersfrominstallingsoftwareormodifyingsystemsettingsiftheymanagetorunexploitcode.
Itisanextralayerofprotectionthatlocksdownpartsofyoursystemthatyourbrowserordinarilydoesn'tneedtouse.
-Unfortunatelyitblocksaccessandfunctionalityto/onsomeDoDwebsiteslikeHRC'sEES.
Totrythisoption,ClickTools,InternetOptions,Advanced(tab)Ifthepreviousadjustmentsdidnotwork,selectReset…atthebottomoftheAdvanced(tab),ANDwhatyouseeonthenextpageYoumayneedtoRemovecertificates(seeslides5&13forinstructionsonhowtogettothislocation).
Peoplewith2CACsmayseeupto8certsaftertheyhaveactivatedtheirPIVcertificates(4certspercard).
NOTE2:Youwillreceiveamessagestating:Youcannotdecryptdataencryptedusingthecertificates.
Select:YesThispageisCACSpecificNOTE:RemovingcertsandyourCAC,thenreinsertyourCACisawaytotestifyourreaderandmiddlewareareworkingproperly.
Yourcertificates"should"automaticallybeavailabletoWindowswhenyouremoveandreinsertyourCACintothereader,however…IfyouhaveActivClient6.
2.
0.
x(Windows7)installed.
.
YoucandoubleclicktheActivClienticon(byyourclockinthelowerrightcornerofyourscreen)nowgotoslide26Ifyoudon'tseeitthere:Windows7userscanClickStart/Windowslogo,AllPrograms,ActivIdentity,ActivClient,UserConsole.
NowgotonextslideWindows7,8/8.
1,&10nativeuserswillnotseeanActivClienticon,sinceyouarenotusingit.
ActivClient7.
0.
x.
x.
&7.
1.
x.
xdonothavethefunctionofmakingavailabletowindows,youronlyoptionistoremovethecardandreinsertit.
ThispageisCACSpecificResettingoptimizationcacheinActivClient7.
1.
0.
xClickTools,Advanced,ResetoptimizationcacheThispageisCACSpecificForgetstateforallcardsinActivClient6.
2.
0.
x,thishelpsDualCACholdersimmediatelyafteraPIVactivationClickTools,Advanced,Forgetstateforallcards(twice)DOE.
JOHN.
ANDREW.
1111111111'sThispageisCACSpecificGotonextpagetoMakeCertificatesavailabletoWindowsMakeCertificatesavailabletoWindows.
.
.
ForgetstateforallcardsHowtomakeyourcertificatesavailabletoWindowswhenusingActivClient6.
2.
0.
xClickTools,Advanced,MakeCertificatesavailabletoWindowsDOE.
JOHN.
ANDREW.
1111111111'sThispageisCACSpecificYoushouldseethismessageTrytheseadditionalitemsifyouarestillhavingissues:Yourtimeonyourcomputermaybeoffbymorethantheserver's5minuteallowedlimit.
Checkyourclockandtimezone.
Ifallofthepreviousideasdidnotwork,pleasevisit:https://militarycac.
com/cacdrivers.
htmtostarttroubleshootingyourCACreaderWhencheckingyouremailonWindows10,makesureyouareselectingthecorrectcertificate.
SelectMorechoicestoseeadditionalcertificate(s)ThispageisCACSpecificTherehavebeenDNSissuesforsomepeople,pleasetrytheideasbelowifstillhavingproblemsHere'showinWindowstomanuallyconfiguretheDNSsettings.
1.
RightclickonyourWireless/Ethernetconnection(downbyyourclock)2.
SelectOpenNetworkandSharingCenter3.
ClickChangeAdapterSettings4.
RightClickonyouractiveinternetconnection,selectProperties5.
UnderThisconnectionusesthefollowingitems:scrolldownandclickonInternetProtocolVersion4(TCP/IPv4),thenclickProperties6.
SelecttheoptionUsethefollowingDNSserveraddresses:.
ThisiswhereyoumanuallyconfigureyourDNSservers:NOTE:ItisuptoyouifyouwanttouseOpenDNS,Quad9,orCloudflare.
Youmighttryeachofthemseparately.
Quad9-enter9.
9.
9.
9forPreferredDNSserver,andleavealternateDNSserverblank.
ClickOK,thenclickCloseorCloudflare–enter1.
1.
1.
1forPreferredDNSserver,and1.
0.
0.
1forAlternateDNS,ClickOK,thenclickCloseTherehavebeenDNSissuesforsomepeople,pleasetrytheideasbelowifstillhavingproblemsHere'sHowonaMactomanuallyconfiguretheDNSsettings.
1.
ClickAppleicon->SystemPreferences,Network.
2.
Selectthenetworkconnectionserviceyouwanttouse(usuallyWi-FiorEthernet,unlessyounameditsomethingelse)inthelist,thenclicktheAdvanced(button).
3.
ClicktheDNS(tab),clickthe(+)atthebottomoftheDNSServerslist.
ThisiswhereyouwilladdDNSserverIPaddresses.
NOTE:ItisuptoyouifyouwanttouseOpenDNSorQuad9.
Youmighttryeachofthemseparately.
Quad9-enter9.
9.
9.
9andleavealternateDNSblankorCloudflare–enter1.
1.
1.
1and1.
0.
0.
14.
Whenyou'refinished,clickOK,thenclosetheopenwindowNeverEndingPINpromptswhenusingInternetExploreraccessingOWAWhatIknow:1.
IamreceivingemailsfrompeopleintheArmyaccessing@mail.
mil,AirForceaccessing@us.
af.
mil,Navyaccessing@navy.
mil,andMarinesaccessing@usmc.
mil2.
IamalsoreceivingemailsfrompeopleusingbothWindowsandMaccomputers.
3.
TheyareallreceivingmanyPINpromptswhenusingInternetExplorer(IE)onWindows,andSafarionMaccomputers.
WhatItappearstome:ExchangeserverswerepushedasecuritypatchinearlyOctober2019.
Whatyoucando:1.
Ifyoudoneedencryption,useGoogleChrome,ORbereadytoenteryourPINbetween6-24timesbetweenactions.
Ihopeyoudon'tblockyourCACintheprocess2.
OnaWindowscomputer,lookforKB4519338anduninstallit.
Youcanonlyholdyourupdatesforamaxof7days.
Thiswillblockallsecurityupdates,makingyourcomputerunsecure.
Therefore,Idonotrecommendedthisoption.
3.
Afewpeoplehavereportedthatoncetheirmail.
milaccountwasmigratedtotheAuthenticationcertificatefromtheEmailcertificate,theynolongerareexperiencingthisissue.
4.
Callyourrespectivehelpdesksandletthemknow.
https://milcac.
us/questions.
htmPresentationcreatedandmaintainedby:MichaelJ.
Danberryhttps://MilitaryCAC.
comhttps://MilitaryCAC.
org(DoDComputers)Ifyoustillhavequestions,visit:https://militarycac.
com/questions.
htmhttps://militarycac.
org/questions.
htm(DoDComputers)
rangcloud怎么样?rangcloud是去年年初开办的国人商家,RangCloud是一家以销售NAT起步,后续逐渐开始拓展到VPS及云主机业务,目前有中国香港、美国西雅图、韩国NAT、广州移动、江门移动、镇江BGP、山东联通、山东BGP等机房。目前,RangCloud提供香港CN2线路云服务器,电信走CN2、联通移动直连,云主机采用PCle固态硬盘,19.8元/月起,支持建站使用;美国高防云...
美国高防服务器提速啦专业提供美国高防服务器,美国高防服务器租用,美国抗攻击服务器,高防御美国服务器租用等。我们的海外高防服务器带给您坚不可摧的DDoS防护,保障您的业务不受攻击影响。HostEase美国高防服务器位于加州和洛杉矶数据中心,均为国内访问速度最快最稳定的美国抗攻击机房,带给您快速的访问体验。我们的高防服务器配有最高层级的DDoS防护系统,每款抗攻击服务器均拥有免费DDoS防护额度,让您...
BuyVM针对中国客户推出了China Special - STREAM RYZEN VPS主机,带Streaming Optimized IP,帮你解锁多平台流媒体,适用于对于海外流媒体有需求的客户,主机开设在拉斯维加斯机房,AMD Ryzen+NVMe磁盘,支持Linux或者Windows操作系统,IPv4+IPv6,1Gbps不限流量,最低月付5加元起,比美元更低一些,现在汇率1加元=0.7...
win10s为你推荐
根目录请问什么是根目录支付宝查询余额支付宝怎么查余额?!?!创维云电视功能创维云电视是指什么iphone6上市时间苹果6是什么时候出的 ?iphone6上市时间苹果6什么时候出?微信电话本怎么用微信电话本在哪里 微信电话本怎么打开南北互通为何会出现网络的南北互通问题首页无法修改默认主页无法修改怎么办?液晶显示器电源维修液晶显示器 电源板损坏 如何检修? 好的加分!小米什么时候抢购小米再一次抢购在什么时候?!
新加坡虚拟主机 香港vps99idc 樊云 raksmart l5639 视频存储服务器 流媒体服务器 idc评测网 警告本网站美国保护 元旦促销 域名转向 183是联通还是移动 域名接入 美国堪萨斯 东莞服务器 双线机房 免费asp空间 免费获得q币 godaddy中文 zencart安装 更多