Want to highlight a helpful answer? Upvote!
Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others!Learn more about when to upvote >
Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others!Learn more about when to upvote >
Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.
User profile for user: BevB
BevB Author
User level: Level1 25 points
How can I access .mil accounts with Safari? It says the certificate is not trusted and will not allow me to move forward. I got around this by using Firefox, but now that Firefox was updated I can't get to .mil sites with it either. I must access these sites using PKI in order to do my job. Does anyone have any solutions that don't involve running Parallels and using IE? I can't even access all the .mil sites using IE.
MacBook Pro 15", macOS 10.14
Posted on Jul 10, 2019 7:46 AM
Question marked as Top-ranking reply
User profile for user: BevB
BevB Author
User level: Level1 25 points
Posted on Jul 11, 2019 1:40 PM
I have received a resolution to this issue. These are the steps:
Go into Keychain
Choose Login (make sure the padlock is unlocked)
Choose All Items under Category
Search for the JPAS certs under Identity Preference (or DISS or SWFT - whatever you are having issues with - I had issues with all 3) and delete those certificates (the ones with identity preference noted)
Close the Keychain
Clear All History in Safari
Close Safari and then reopen
Go back to the site - it will take a little time to load. If it won't allow you to proceed due to privacy issues, go back to Keychain and search for the certificates. Under Trust, make sure Always Trust is chosen. Clear History in Safari again, open and close the browser and it should work when you go back to the site.
This process has worked for me to access JPAS, DISS and SWFT. The only problem I am still having is accessing NISS via NCAISS, but that's a different Help Desk, so I'm hoping to reach someone who understands Macs there as well.
View in context
Similar questions
- Safari doesn’t recognize secure sitesWhen I use Safari to search for sites that I have used previously and are known to be secure, I get a message that says the site is not secure. This happened after upgrading to OS Monterey. I have done everything that I’ve read about in various places, but when given the option to accept the site’s certificate (at least I think so) I’m not able to do that. This is driving me crazy. 6671
- Safari problemsHi,I have a 24" iMac 2007 running El Capitan (it won't update to a later OS) I have Safari version 11.1.2 on it. I am getting issues with trying to get onto on line banking, saying the certificate provider for the banking site is not trustworthy, I think this issue is coming up because Safari needs up dating, but I can't seem to do this. Can this be done, or should I just use a different browser?Thanks in advance for any help 3824
- Safari can’t open the page because Safari can’t establish a secure connectionA friend has started having a problem on her Mac connecting to certain web sites that she has connected to many times in the past. The Mac throws up this error…Safari can’t open the page because Safari can’t establish a secure connectionI tried to help me by changing her DNS servers from Open DNS to Google’s. No solution.I used Firefox to find out what the host servers were and changed the Trust settings on those certificates to Always in Keychain. No luck.I removed the cookies and cache data associated with the sites. Restarted Safari. Nope.I tried changing the settings in iPv6 to manual but the fields didn’t automatically populate with the Router, iPv6 Address and Prefix Length so it wouldn’t let him proceed and had to cancel.She is running an older iMac, Yosemite, Safari 10.1.2. Upgrading to a new OS isn't a desirable option because she is using quite a bit of older software that would be rendered useless.Anybody have any suggestions?Thanks, Welles 343115
3 replies
Loading page content
Page content loaded
Question marked as Top-ranking reply
User profile for user: BevB
BevB Author
User level: Level1 25 points
Jul 11, 2019 1:40 PM in response to BevB
I have received a resolution to this issue. These are the steps:
Go into Keychain
Choose Login (make sure the padlock is unlocked)
Choose All Items under Category
Search for the JPAS certs under Identity Preference (or DISS or SWFT - whatever you are having issues with - I had issues with all 3) and delete those certificates (the ones with identity preference noted)
Close the Keychain
Clear All History in Safari
Close Safari and then reopen
Go back to the site - it will take a little time to load. If it won't allow you to proceed due to privacy issues, go back to Keychain and search for the certificates. Under Trust, make sure Always Trust is chosen. Clear History in Safari again, open and close the browser and it should work when you go back to the site.
This process has worked for me to access JPAS, DISS and SWFT. The only problem I am still having is accessing NISS via NCAISS, but that's a different Help Desk, so I'm hoping to reach someone who understands Macs there as well.
Link
User profile for user: Eric Root
Eric Root
User level: Level10 684,261 points
Jul 10, 2019 8:29 AM in response to BevB
Try setting up another admin user account in System Preferences/Users & Groups to see if the same problem continues. Please post back on whether or not this worked. Also try the Safe Mode. Please post back on whether or not this worked.
Isolating an issue by using another user account
Safe Mode - About
If it works in the Safe Mode, try running this program when booted normally and then copy and paste the output in a reply. The program was created by Etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. Click “Share Report” button in the toolbar, select “Copy to Clipboard” and then paste into a reply. This will show what is running on your computer. No personal information is shown. If the log won’t post, try posting it in Pastebin and provide a link in a reply Pastebin
Etrecheck – System Information
Link
User profile for user: BevB
BevB Author
User level: Level1 25 points
Jul 10, 2019 10:00 AM in response to Eric Root
Before I try this, let me update things as I keep trying. I can actually get to some .mil sites. What I seen to be unable to do is to logon with my PKI. This is the response I receive:
Your session could not be established. Access was denied by the access policy. This may be due to a failure to meet access policy requirements. If you are an administrator, please go to Access Policy >> Reports: All Sessions page and look up the session reference number displayed above.
I also sometimes receive: MB ITN-Certificate-Required (even though my PKI is loaded is it like it isn't seeing it).
Link
accessing .mil sites with Safari
