Internet Explorer 9 & WMIRS, E-Services, etc.

[Cliff_Chambliss]

Just upgraded my computer and quickly found that IE9 would not permit me to access anyhting beyond the eservices sign in page, WMIRS, (AKO & DKO) and the list went on.  Even after I was finally able to get to eservices knowledgebase, the security settings would not let me see their "fix".  After much cussing, discussing, trying various tricks, drinking a beer (which really did a lot of good) I finally found a fix that works.  Here is is:


   DoD Class 3 PKI
Download Root CA Certificate
________________________________________

Instructions for downloading the certificate for the Root Certificate Authority (CA). 
Save the file to your local machine.

1.   Right click on the saved file and select Open.

2.   Expand down and click on Certificates. For each certificate listed double click on the certificate.

3.   At the Certificate window click the Install Certificate button.

4.   Click next in the Certificate Import Wizard, select "Place all certificates in the following store" and click Browse. If this is a Root Certificate select "Trusted Root Certification Authorities" or if it is a Intermediate CA Certificate select "Intermediate Certification Authorities" and click ok. Click next and click finish.

After reading the above instructions, click on:   http://dodpki.c3pki.chamb.disa.mil/rel3_dodroot_1024.p7b.

Then, using the same instructions, click on:   http://dodpki.c3pki.chamb.disa.mil/rel3_dodroot_2048.p7b

Then, using the same intructions, click on:   http://dodpki.c3pki.chamb.disa.mil/dodeca.p7b

Then, using the same intructions, click on:   http://dodpki.c3pki.chamb.disa.mil/dodeca2.p7b

If you need to trust certificates from any of the retired Root Certification or Intermediate Certification Authorities for any reason click:   http://dodpki.c3pki.chamb.disa.mil/legacyroot.html

I hope this will be of use to some of you.
Cliff

[a2capt]

This is actually the norm for any browser fresh out of the wraps. DoD tends to self sign their own certificates. Since they are not issued by a "known" issuer. (no one that self signs, regardless of what level of trust you think they should have, can ever be a known issuer. 

Some browsers simply will not let you into a self signed site without a root certificate that you get warned 18 ways from Wednesday about, before it lets you actually install it. Others will but still warn you a few times. Perhaps IE9 has made the jump to "not on your life, we're tired of being blamed for security problems", too.


But a simple set of steps for those challenged by it, is always appreciated.

[Eclipse]

Why are you still using IE?

[HGjunkie]

Google Chrome Botnet Master Race here.